Skip to content
OpenAdvisories
Unscored CVE-2019-1010182 EUVD-2019-1927GHSA-78qj-jpww-m9rm

yaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of service by impossible to catch abort. The comp…

Published Jul 25, 2019 · Updated Aug 5, 2024 · Assigned by dwf

Vendor: yaml-rust Product: yaml-rust

Description

yaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of service by impossible to catch abort. The component is: YamlLoader::load_from_str function. The attack vector is: Parsing of a malicious YAML document. The fixed version is: 0.4.1 and later.

Affected products

VendorProductAffectedFixed
yaml-rust yaml-rust 0.4.0 and earlier [fixed: 0.4.1 and later] —

References