top of page
perceptive_background_267k.jpg

A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a k…

Published:

16 March 2026 at 23:00:00

Alert date:

17 March 2026 at 05:01:05

Source:

nvd.nist.gov

Click to open the original link from this advisory

Supply Chain & Dependencies

A vulnerability in libucl allows remote attackers to cause denial of service through specially crafted Universal Configuration Language (UCL) input containing keys with embedded null bytes. The flaw triggers a segmentation fault in the ucl_object_emit function during parsing and emitting operations. This results in application crashes and system unavailability. The vulnerability affects the Universal Configuration Language parsing library. Remote exploitation is possible without authentication requirements.

Technical details

Mitigation steps:

Affected products:

libucl

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page