Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-highlineUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade rubygem-foreman_maintainUpgrade rubygem-ffiUpgrade rubygem-unf_ext-debugsourceUpgrade foreman-cliUpgrade rubygem-oauthUpgrade rubygem-mime-types-dataUpgrade rubygem-clampUpgrade satellite-cliUpgrade rubygem-version_gemUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-http-cookieUpgrade rubygem-unicode-display_widthUpgrade rubygem-domain_nameUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_extUpgrade rubygem-netrcUpgrade rubygem-hashieUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cliUpgrade rubygem-unicode-debugsourceUpgrade rubygem-fast_gettextUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-gssapiUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-little-pluggerUpgrade rubygem-ffi-debugsourceUpgrade rubygem-localeUpgrade rubygem-oauth-ttyUpgrade rubygem-http-acceptUpgrade rubygem-snaky_hashUpgrade rubygem-ffi-debuginfoUpgrade rubygem-apipie-bindingsUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicodeUpgrade satellite-cloneUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_remote_execution | May 4, 2023 | Sep 5, 2022 |
| Debian | — | Upgrade snakeyaml | Oct 4, 2022 | Sep 5, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Gentoo Linux | — | Upgrade dev-java/snakeyaml. | May 23, 2023 | Sep 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-unicode-debugsourceUpgrade rubygem-snaky_hashUpgrade rubygem-loggingUpgrade satellite-cliUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_katelloNo solution existsUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-debuginfoUpgrade rubygem-netrcUpgrade rubygem-unicode-display_widthUpgrade satellite-maintainUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-mime-typesUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-jwtUpgrade rubygem-hammer_cliUpgrade rubygem-oauthUpgrade python39-pulp_manifestUpgrade rubygem-unicodeUpgrade rubygem-little-pluggerUpgrade rubygem-hashieUpgrade rubygem-foreman_maintainUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-fast_gettextUpgrade foreman-cliUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-mime-types-dataUpgrade rubygem-gssapiUpgrade rubygem-oauth-ttyUpgrade rubygem-highlineUpgrade rubygem-amazing_printUpgrade rubygem-unfUpgrade satellite-cloneUpgrade rubygem-domain_nameUpgrade rubygem-apipie-bindingsUpgrade rubygem-http-cookieUpgrade rubygem-ffi-debuginfoUpgrade rubygem-rest-client | May 4, 2023 | Sep 5, 2022 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfoUpgrade libdb-utils-debuginfo | Mar 12, 2024 | Sep 5, 2022 |
| Suse | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Oct 26, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade libyaml-snake-javaUpgrade libyaml-snake-java (Ubuntu Pro) | Mar 22, 2023 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub