Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criu-libsUpgrade netavarkUpgrade slirp4netnsUpgrade python3-podmanUpgrade skopeo-testsUpgrade containers-commonUpgrade podman-gvproxyUpgrade libslirpUpgrade aardvark-dnsUpgrade toolboxUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade buildahUpgrade buildah-testsUpgrade podman-remoteUpgrade podman-catatonitUpgrade udicaUpgrade runcUpgrade podman-testsUpgrade podman-dockerUpgrade critUpgrade cockpit-podmanUpgrade criuUpgrade crunUpgrade python3-criuUpgrade podman-pluginsUpgrade container-selinuxUpgrade skopeoUpgrade podmanUpgrade toolbox-testsUpgrade fuse-overlayfs | Nov 16, 2023 | Dec 27, 2022 |
| Alpine Linux | — | Upgrade yaml | Mar 21, 2024 | Dec 27, 2022 |
| Centos_linux | — | Upgrade podman-remoteUpgrade criu-debugsourceUpgrade toolboxUpgrade skopeoUpgrade runcUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade criu-libsUpgrade criu-develUpgrade libslirp-debugsourceUpgrade crunUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade runc-debuginfoUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade libslirp-debuginfoUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade critUpgrade containernetworking-pluginsUpgrade netavarkUpgrade toolbox-debuginfoUpgrade buildah-debuginfoUpgrade container-selinuxUpgrade podman-gvproxyUpgrade podman-plugins-debuginfoUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade python3-podmanUpgrade aardvark-dnsUpgrade python3-criuUpgrade conmon-debuginfoUpgrade criu-libs-debuginfoUpgrade skopeo-debuginfoUpgrade criu-debuginfoUpgrade conmonUpgrade cockpit-podmanUpgrade conmon-debugsourceUpgrade libslirpUpgrade podman-dockerUpgrade buildah | Nov 8, 2023 | Dec 27, 2022 |
| Debian | — | Upgrade golang-yaml.v2 | Jul 10, 2023 | Dec 27, 2022 |
| Oracle_linux | — | Upgrade conmonUpgrade podman-gvproxyUpgrade python3-podmanUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade criu-libsUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade criu-develUpgrade libslirp-develUpgrade python3-criuUpgrade skopeo-testsUpgrade libslirpUpgrade podman-testsUpgrade container-selinuxUpgrade skopeoUpgrade podmanUpgrade fuse-overlayfsUpgrade crunUpgrade podman-remoteUpgrade podman-catatonitUpgrade critUpgrade runcUpgrade containernetworking-pluginsUpgrade criuUpgrade buildah-testsUpgrade aardvark-dnsUpgrade udicaUpgrade podman-dockerUpgrade buildahUpgrade netavark | Nov 22, 2023 | Aug 29, 2022 |
| Redhat_linux | — | Upgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade python3-podmanUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade buildahUpgrade rhc-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade rhcUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade criu-debuginfoUpgrade rhc-debugsourceUpgrade buildah-testsUpgrade skopeoUpgrade podman-pluginsUpgrade conmonUpgrade crun-debuginfoUpgrade netavarkUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade toolboxUpgrade runc-debuginfoUpgrade buildah-debuginfoUpgrade libslirp-develUpgrade criu-libsUpgrade toolbox-testsUpgrade skopeo-testsUpgrade podmanUpgrade podman-dockerUpgrade slirp4netns-debuginfoNo solution existsUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade podman-catatonitUpgrade runcUpgrade crunUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade podman-remoteUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade udicaUpgrade aardvark-dnsUpgrade toolbox-debuginfoUpgrade criuUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade rhc-debuginfo | Nov 8, 2023 | Dec 27, 2022 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade netavarkUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-develUpgrade criu-develUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade crunUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runcUpgrade podman-pluginsUpgrade crun-debugsourceUpgrade conmonUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade slirp4netnsUpgrade podman-testsUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade podman-plugins-debuginfoUpgrade libslirpUpgrade python3-criuUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade criuUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade buildahUpgrade conmon-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Ubuntu | — | Upgrade golang-yaml.v2-dev (Ubuntu Pro)Upgrade golang-gopkg-yaml.v2-devUpgrade golang-gopkg-yaml.v2-dev (Ubuntu Pro)Upgrade golang-yaml.v2-dev | Aug 15, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub