Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Jan 10, 2024 | Sep 5, 2022 |
| Centos_linux | — | Upgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-display_widthUpgrade satellite-cloneUpgrade rubygem-multi_jsonUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hashieUpgrade rubygem-powerbarUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookieUpgrade rubygem-foreman_maintainUpgrade rubygem-version_gemUpgrade python39-pulp_manifestUpgrade rubygem-mime-typesUpgrade rubygem-ffiUpgrade satellite-cliUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_extUpgrade rubygem-domain_nameUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-localeUpgrade rubygem-fast_gettextUpgrade rubygem-oauth-ttyUpgrade rubygem-highlineUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffi-debugsourceUpgrade rubygem-snaky_hashUpgrade rubygem-rest-clientUpgrade rubygem-loggingUpgrade rubygem-http-acceptUpgrade rubygem-gssapiUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-amazing_printUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-little-pluggerUpgrade rubygem-jwtUpgrade rubygem-clampUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_templates | May 4, 2023 | Sep 5, 2022 |
| Debian | — | Upgrade snakeyaml | Oct 4, 2022 | Sep 5, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Gentoo Linux | — | Upgrade dev-java/snakeyaml. | May 23, 2023 | Sep 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-powerbarUpgrade rubygem-unicodeUpgrade rubygem-hashieUpgrade rubygem-rest-clientUpgrade python39-pulp_manifestUpgrade rubygem-version_gemUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_googleNo solution existsUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-fast_gettextUpgrade rubygem-domain_nameUpgrade rubygem-ffi-debuginfoUpgrade rubygem-ffiUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-multi_jsonUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-amazing_printUpgrade rubygem-gssapiUpgrade rubygem-http-acceptUpgrade satellite-cliUpgrade rubygem-http-cookieUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-netrcUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unfUpgrade rubygem-mime-typesUpgrade rubygem-highlineUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_katelloUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-oauth-ttyUpgrade rubygem-snaky_hashUpgrade rubygem-clampUpgrade rubygem-unicode-debugsourceUpgrade rubygem-foreman_maintainUpgrade satellite-maintain | May 4, 2023 | Sep 5, 2022 |
| Rocky_linux | — | Upgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfo | Mar 12, 2024 | Sep 5, 2022 |
| Suse | — | Upgrade snakeyaml-javadocUpgrade snakeyaml | Oct 26, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade libyaml-snake-java (Ubuntu Pro)Upgrade libyaml-snake-java | Mar 22, 2023 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub