Description (CNA)
A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the `ucl_object_emit` function when parsing and emitting the object, leading to a Denial of Service (DoS) for the affected system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| libucl / libucl | affected 3e7f023e184e06f30fb5792dacd9dd0f8b692f1b |
CWE
CWE-125
References
- https://access.redhat.com/security/cve/CVE-2026-0708
- https://bugzilla.redhat.com/show_bug.cgi?id=2427770
- https://github.com/vstakhov/libucl/issues/323
ADP enrichment
No English description supplied.