Количество 8
Количество 8
CVE-2022-38751
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
CVE-2022-38751
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
CVE-2022-38751
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
CVE-2022-38751
DoS in SnakeYAML
CVE-2022-38751
Using snakeYAML to parse untrusted YAML files may be vulnerable to Den ...
GHSA-98wm-3w3q-mw94
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write
BDU:2023-05609
Уязвимость библиотеки для сериализации и десериализации YAML-документов SnakeYAML, связанная с переполнением буфера на стеке, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2022:3397-1
Security update for snakeyaml
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-38751 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-38751 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-38751 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-38751 DoS in SnakeYAML | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| CVE-2022-38751 Using snakeYAML to parse untrusted YAML files may be vulnerable to Den ... | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
| GHSA-98wm-3w3q-mw94 snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | BDU:2023-05609 Уязвимость библиотеки для сериализации и десериализации YAML-документов SnakeYAML, связанная с переполнением буфера на стеке, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | SUSE-SU-2022:3397-1 Security update for snakeyaml | больше 3 лет назад |
Уязвимостей на страницу