[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2024-2403 --- snakeyaml

ID: oval:org.secpod.oval:def:1702019Date: (C)2024-02-07   (M)2024-03-20
Class: PATCHFamily: unix




Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks . If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks . If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow

Platform:
Amazon Linux 2
Product:
snakeyaml
Reference:
ALAS2-2024-2403
CVE-2022-38750
CVE-2022-38751
CVE    2
CVE-2022-38751
CVE-2022-38750
CPE    1
cpe:/o:amazon:linux:2

© SecPod Technologies