{"id":"CVE-2026-0708","aliases":["EUVD-2026-12534","GHSA-gxf2-jfmj-j5cj"],"status":"published","title":"Libucl: libucl: denial of service via embedded null byte in ucl input","description":"A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the `ucl_object_emit` function when parsing and emitting the object, leading to a Denial of Service (DoS) for the affected system.","severity":{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00403,"percentile":0.35022,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2026-03-17T02:28:08Z","modified":"2026-10-28T02:30:21Z","products":[{"vendor":"libucl","product":"libucl"},{"vendor":"vstakhov","product":"libucl"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-0708","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2427770","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/vstakhov/libucl/issues/323","tags":["exploit","Exploit","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0708","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gxf2-jfmj-j5cj"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0708.json","tags":["advisory"]},{"url":"https://github.com/vstakhov/libucl","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-0708","title":"Libucl: libucl: denial of service via embedded null byte in ucl input","description":"A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the `ucl_object_emit` function when parsing and emitting the object, leading to a Denial of Service (DoS) for the affected system.","status":"published","published":"2026-03-17T02:28:08.429Z","modified":"2026-03-17T13:26:47.057Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:20:13.587351Z"}],"euvd":[{"id":"EUVD-2026-12534","description":"A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the `ucl_object_emit` function when parsing and emitting the object, leading to a Denial of Service (DoS) for the affected system.","status":"published","published":"2026-03-17T02:28:08Z","modified":"2026-03-17T13:26:47Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T19:25:33.692584Z"}],"ghsa":[{"id":"GHSA-gxf2-jfmj-j5cj","title":"A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted...","description":"A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the `ucl_object_emit` function when parsing and emitting the object, leading to a Denial of Service (DoS) for the affected system.","status":"published","published":"2026-03-17T06:31:32Z","modified":"2026-03-17T06:31:33Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:06:39.944141Z"}],"nvd":[{"id":"CVE-2026-0708","description":"A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the `ucl_object_emit` function when parsing and emitting the object, leading to a Denial of Service (DoS) for the affected system.","status":"published","published":"2026-03-17T04:16:07.75Z","modified":"2026-06-17T10:11:14.673Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:12:09.735529Z"}],"osv":[{"id":"CVE-2026-0708","title":"Libucl: libucl: denial of service via embedded null byte in ucl input","description":"A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the `ucl_object_emit` function when parsing and emitting the object, leading to a Denial of Service (DoS) for the affected system.","status":"published","published":"2026-03-17T02:28:08.429Z","modified":"2026-10-28T02:30:21.538703993Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:44:53.490346Z"}]}}