Uncontrolled Recursion in Yaml-Rust Crate from Unvendor
CVE-2018-20993

7.5HIGH

Key Information:

Vendor

Yaml-rust Project

Status
Yaml-rust
Vendor
CVE Published:
26 August 2019

What is CVE-2018-20993?

A vulnerability exists in the yaml-rust crate, where uncontrolled recursion can occur during the deserialization process. This flaw can lead to unexpected behaviors or system resource exhaustion on affected systems, especially if maliciously crafted input is provided. Developers using versions prior to 0.4.1 should take proactive measures to update to secure releases and implement safeguards in their applications.

References

https://rustsec.org/advisories/RUSTSEC-2018-0006.html
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.