Libucl
Monthly
Denial of service in libucl allows remote attackers to crash affected applications by submitting maliciously crafted UCL configuration files containing null bytes in object keys, triggering a segmentation fault in the ucl_object_emit function. The vulnerability requires user interaction but has high impact potential with no available patch, affecting systems that parse untrusted UCL input. An attacker can remotely exploit this with low complexity to disable services relying on libucl for configuration parsing.
Heap-based buffer overflow in libucl up to 0.9.2 allows local attackers to cause a denial of service via crafted input to the ucl_parse_multiline_string function. A public exploit exists, but no active exploitation has been reported and EPSS score is low (0.04%).
Denial of service in libucl allows remote attackers to crash affected applications by submitting maliciously crafted UCL configuration files containing null bytes in object keys, triggering a segmentation fault in the ucl_object_emit function. The vulnerability requires user interaction but has high impact potential with no available patch, affecting systems that parse untrusted UCL input. An attacker can remotely exploit this with low complexity to disable services relying on libucl for configuration parsing.
Heap-based buffer overflow in libucl up to 0.9.2 allows local attackers to cause a denial of service via crafted input to the ucl_parse_multiline_string function. A public exploit exists, but no active exploitation has been reported and EPSS score is low (0.04%).