Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade snakeyaml-javadocUpgrade snakeyaml | Feb 8, 2024 | Sep 5, 2022 |
| Centos_linux | — | Upgrade rubygem-highlineUpgrade rubygem-mime-typesUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hashieUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-jwtUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-netrcUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-ffiUpgrade satellite-cliUpgrade rubygem-http-acceptUpgrade rubygem-unicode-display_widthUpgrade rubygem-loggingUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-mime-types-dataUpgrade python39-pulp_manifestUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_extUpgrade rubygem-oauthUpgrade rubygem-gssapiUpgrade rubygem-oauth-ttyUpgrade foreman-cliUpgrade rubygem-localeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cliUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade satellite-cloneUpgrade rubygem-http-cookieUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-domain_nameUpgrade rubygem-apipie-bindingsUpgrade rubygem-unfUpgrade rubygem-powerbar | May 4, 2023 | Sep 5, 2022 |
| Debian | — | Upgrade snakeyaml | Jul 30, 2024 | Sep 5, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Gentoo Linux | — | Upgrade dev-java/snakeyaml. | May 23, 2023 | Sep 5, 2022 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 5, 2022 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Sep 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-little-pluggerUpgrade rubygem-unicodeUpgrade rubygem-hashieUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-amazing_printUpgrade rubygem-rest-clientUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cliUpgrade foreman-cliUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unfUpgrade rubygem-http-cookieUpgrade rubygem-gssapiUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-debuginfoUpgrade rubygem-domain_nameUpgrade rubygem-highlineUpgrade satellite-cloneUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-apipie-bindingsUpgrade rubygem-mime-typesUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unf_extUpgrade rubygem-version_gemUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-cliUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_ext-debugsourceNo solution existsUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-jwtUpgrade python39-pulp_manifestUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-fast_gettextUpgrade rubygem-snaky_hashUpgrade rubygem-clampUpgrade rubygem-ffi-debugsourceUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-debugsource | May 4, 2023 | Sep 5, 2022 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-utils-debuginfo | Mar 12, 2024 | Sep 5, 2022 |
| Suse | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Oct 26, 2022 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub