CVE-2017-5950

Name of the Vulnerable Software and Affected Versions yaml-cpp (aka LibYaml-C++) version 0.5.3

Description The issue allows remote attackers to cause a denial of service, resulting in stack consumption and application crash, via a crafted YAML file. This is due to a problem in the SingleDocParser::HandleNode function.

Recommendations For yaml-cpp (aka LibYaml-C++) version 0.5.3, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.