Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade snakeyaml-javadocUpgrade snakeyaml | Feb 8, 2024 | Sep 5, 2022 |
| Centos_linux | — | Upgrade rubygem-hashieUpgrade rubygem-highlineUpgrade rubygem-ffiUpgrade rubygem-netrcUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-loggingUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade rubygem-http-acceptUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-version_gemUpgrade satellite-maintainUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-domain_nameUpgrade rubygem-apipie-bindingsUpgrade rubygem-amazing_printUpgrade python39-pulp_manifestUpgrade rubygem-fast_gettextUpgrade foreman-cliUpgrade rubygem-unf_extUpgrade rubygem-gssapiUpgrade rubygem-snaky_hashUpgrade rubygem-oauth-ttyUpgrade rubygem-mime-types-dataUpgrade rubygem-localeUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-powerbarUpgrade rubygem-hammer_cliUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookieUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-cloneUpgrade rubygem-ffi-debuginfoUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-oauthUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-little-plugger | May 4, 2023 | Sep 5, 2022 |
| Debian | — | Upgrade snakeyaml | Jul 30, 2024 | Sep 5, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Gentoo Linux | — | Upgrade dev-java/snakeyaml. | May 23, 2023 | Sep 5, 2022 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 5, 2022 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Sep 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-oauthUpgrade rubygem-domain_nameUpgrade satellite-cloneUpgrade rubygem-unicode-debuginfoUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_googleUpgrade foreman-cliUpgrade rubygem-apipie-bindingsUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-little-pluggerUpgrade rubygem-ffi-debuginfoUpgrade rubygem-oauth-ttyUpgrade rubygem-hashieUpgrade rubygem-rest-clientUpgrade rubygem-powerbarUpgrade rubygem-gssapiUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unicodeUpgrade rubygem-hammer_cliUpgrade rubygem-http-cookieUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unfUpgrade rubygem-amazing_printUpgrade rubygem-ffi-debugsourceUpgrade rubygem-jwtUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-loggingUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-maintainUpgrade python39-pulp_manifestNo solution existsUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade satellite-cliUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_extUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-netrcUpgrade rubygem-mime-typesUpgrade rubygem-fast_gettextUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-version_gem | May 4, 2023 | Sep 5, 2022 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfo | Mar 12, 2024 | Sep 5, 2022 |
| Suse | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Oct 26, 2022 | Sep 5, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub