CVE-2017-11692

High

Published: 30/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The function 'Token& Scanner::peek' in yaml-cpp version 0.5.3 and earlier allows remote attackers to cause a denial of service via a '!2' string.

Risk Assessment

Attackers can exploit this vulnerability to trigger an assertion failure, leading to application exit and affecting service availability.

Recommendation

It is recommended to upgrade to a newer version of yaml-cpp to mitigate this vulnerability.

Other vulnerabilities in yaml-cpp

CVE-2026-75432Low risk· EPSS 21%
An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent(), and Scanner::PushIndentTo() components.

Original NVD description (English source)

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and application exit) via a '!2' string.