Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Jan 10, 2024 | Sep 5, 2022 |
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-oauth-ttyUpgrade rubygem-fast_gettextUpgrade rubygem-unicode-debugsourceUpgrade foreman-cliUpgrade rubygem-jwtUpgrade rubygem-http-acceptUpgrade rubygem-highlineUpgrade rubygem-loggingUpgrade rubygem-rest-clientUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicodeUpgrade rubygem-clampUpgrade rubygem-little-pluggerUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unicode-debuginfoUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-snaky_hashUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cliUpgrade rubygem-localeUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-cliUpgrade rubygem-netrcUpgrade rubygem-mime-typesUpgrade rubygem-unicode-display_widthUpgrade rubygem-http-cookieUpgrade rubygem-powerbarUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unfUpgrade rubygem-mime-types-dataUpgrade satellite-maintainUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade python39-pulp_manifestUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-hashieUpgrade satellite-cloneUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_google | May 4, 2023 | Sep 5, 2022 |
| Debian | — | Upgrade snakeyaml | Oct 4, 2022 | Sep 5, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Gentoo Linux | — | Upgrade dev-java/snakeyaml. | May 23, 2023 | Sep 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foremanUpgrade rubygem-little-pluggerUpgrade rubygem-unicode-debugsourceUpgrade rubygem-jwtUpgrade rubygem-highlineUpgrade rubygem-mime-typesUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_katelloUpgrade satellite-maintainUpgrade foreman-cliUpgrade rubygem-unicode-debuginfoUpgrade rubygem-clampUpgrade rubygem-snaky_hashUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unfUpgrade rubygem-netrcUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffi-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-multi_jsonUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade satellite-cliUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hashieUpgrade rubygem-version_gemUpgrade rubygem-http-cookieUpgrade rubygem-powerbarUpgrade python39-pulp_manifestUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-oauthUpgrade rubygem-ffiUpgrade rubygem-unf_extNo solution existsUpgrade rubygem-amazing_printUpgrade rubygem-http-acceptUpgrade rubygem-ffi-debuginfoUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-localeUpgrade rubygem-domain_nameUpgrade rubygem-fast_gettextUpgrade rubygem-rest-client | May 4, 2023 | Sep 5, 2022 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | Sep 5, 2022 |
| Suse | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Oct 26, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade libyaml-snake-javaUpgrade libyaml-snake-java (Ubuntu Pro) | Mar 22, 2023 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub