[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2023-2023-375 --- snakeyaml

ID: oval:org.secpod.oval:def:19500413Date: (C)2024-01-04   (M)2024-03-20
Class: PATCHFamily: unix




Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks . If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow. Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks . If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack

Platform:
Amazon Linux 2023
Product:
snakeyaml
Reference:
ALAS2023-2023-375
CVE-2022-38752
CVE-2022-41854
CVE    2
CVE-2022-41854
CVE-2022-38752

© SecPod Technologies