Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9w3m-gqgf-c4p9

Опубликовано: 06 сент. 2022
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

snakeYAML before 1.32 vulnerable to Denial of Service due to Out-of-bounds Write

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DoS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.

Пакеты

Наименование

org.yaml:snakeyaml

maven
Затронутые версииВерсия исправления

< 1.32

1.32

EPSS

Процентиль: 37%
0.00163
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 3 лет назад

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.

CVSS3: 6.5
redhat
больше 3 лет назад

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.

CVSS3: 6.5
nvd
больше 3 лет назад

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.

CVSS3: 6.5
msrc
4 месяца назад

DoS in SnakeYAML

CVSS3: 6.5
debian
больше 3 лет назад

Using snakeYAML to parse untrusted YAML files may be vulnerable to Den ...

EPSS

Процентиль: 37%
0.00163
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-121
CWE-787