CVE-2019-6292

Name of the Vulnerable Software and Affected Versions yaml-cpp (aka LibYaml-C++) version 0.6.2

Description An issue in singledocparser.cpp causes a stack exhaustion problem due to recursive stack frames in functions like HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, and HandleNode. This could allow remote attackers to cause a denial-of-service.

Recommendations For yaml-cpp (aka LibYaml-C++) version 0.6.2, consider disabling the recursive parsing functionality in singledocparser.cpp as a temporary workaround until a patch is available. Restrict access to the HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, and HandleNode functions to minimize the risk of exploitation.