Uncontrolled Recursion
CVE-2019-6285
Summary
The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) prior to 0.7.0 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
- LOW
- NETWORK
- NONE
- UNCHANGED
- REQUIRED
- NONE
- NONE
- HIGH
CWE-674 - Uncontrolled Recursion
The product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.
References
Advisory Timeline
- Published
