CVE-2019-1010182

CVE-2019-1010182 describes an uncontrolled recursion vulnerability in yaml-rust versions 0.4.0 and earlier, specifically within the YamlLoader::load_from_str function. This flaw allows an attacker to trigger a denial of service (DoS) by parsing a specially crafted, malicious YAML document, leading to an impossible-to-catch abort. Rated as MEDIUM severity with a CVSS score of 6.5, the vulnerability has a network attack vector and low attack complexity, requiring user interaction (UI:R) to process the malicious YAML. The primary impact is high availability loss (A:H), with no confidentiality or integrity impact. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of reported vulnerabilities.