Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9w3m-gqgf-c4p9

Опубликовано: 06 сент. 2022
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

snakeYAML before 1.32 vulnerable to Denial of Service due to Out-of-bounds Write

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DoS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.

Пакеты

Наименование

org.yaml:snakeyaml

maven
Затронутые версииВерсия исправления

< 1.32

1.32

EPSS

Процентиль: 80%
0.02101
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 4 года назад

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.

CVSS3: 6.5
redhat
почти 4 года назад

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.

CVSS3: 6.5
nvd
почти 4 года назад

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.

CVSS3: 6.5
msrc
11 месяцев назад

DoS in SnakeYAML

CVSS3: 6.5
debian
почти 4 года назад

Using snakeYAML to parse untrusted YAML files may be vulnerable to Den ...

EPSS

Процентиль: 80%
0.02101
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-121
CWE-787