CVE-2017-5950

low-risk

Published 2017-04-03

The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

Do I need to act?

0.78% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Affected Products (1)

Yaml-Cpp

Affected Vendors

Yaml-Cpp Project

References (5)

Third Party Advisory http://www.securityfocus.com/bid/97307

Third Party Advisory https://github.com/jbeder/yaml-cpp/issues/459

http://seclists.org/fulldisclosure/2024/Nov/0

Third Party Advisory http://www.securityfocus.com/bid/97307

Third Party Advisory https://github.com/jbeder/yaml-cpp/issues/459

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 3/34 · Minimal

Exposure 5/34 · Minimal