Количество 8
Количество 8
CVE-2022-38750
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
CVE-2022-38750
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
CVE-2022-38750
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
CVE-2022-38750
DoS in SnakeYAML
CVE-2022-38750
Using snakeYAML to parse untrusted YAML files may be vulnerable to Den ...
GHSA-hhhw-99gj-p3c3
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write
BDU:2023-05620
Уязвимость библиотеки для сериализации и десериализации YAML-документов SnakeYAML, связанная с переполнением буфера на стеке, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2022:3397-1
Security update for snakeyaml
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-38750 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-38750 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. | CVSS3: 5.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-38750 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-38750 DoS in SnakeYAML | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| CVE-2022-38750 Using snakeYAML to parse untrusted YAML files may be vulnerable to Den ... | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
| GHSA-hhhw-99gj-p3c3 snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write | CVSS3: 5.5 | 0% Низкий | больше 3 лет назад |
 | BDU:2023-05620 Уязвимость библиотеки для сериализации и десериализации YAML-документов SnakeYAML, связанная с переполнением буфера на стеке, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | SUSE-SU-2022:3397-1 Security update for snakeyaml | больше 3 лет назад |
Уязвимостей на страницу