Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade snakeyaml-javadocUpgrade snakeyaml | Jan 10, 2024 | Sep 5, 2022 |
| Centos_linux | — | Upgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debuginfoUpgrade rubygem-amazing_printUpgrade rubygem-http-acceptUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-loggingUpgrade rubygem-unicodeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-localeUpgrade rubygem-highlineUpgrade rubygem-fast_gettextUpgrade rubygem-oauth-ttyUpgrade rubygem-clampUpgrade foreman-cliUpgrade rubygem-jwtUpgrade rubygem-rest-clientUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-multi_jsonUpgrade rubygem-unfUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_openscapUpgrade satellite-cliUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-netrcUpgrade rubygem-mime-typesUpgrade python39-pulp_manifestUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_extUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-apipie-bindingsUpgrade satellite-cloneUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_googleUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_virt_who_configure | May 4, 2023 | Sep 5, 2022 |
| Debian | — | Upgrade snakeyaml | Oct 4, 2022 | Sep 5, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Gentoo Linux | — | Upgrade dev-java/snakeyaml. | May 23, 2023 | Sep 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-highlineUpgrade rubygem-mime-typesUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-oauth-ttyUpgrade satellite-maintainUpgrade rubygem-clampUpgrade foreman-cliUpgrade rubygem-unfUpgrade rubygem-netrcUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debuginfoUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-oauthUpgrade rubygem-hammer_cliNo solution existsUpgrade satellite-cloneUpgrade rubygem-amazing_printUpgrade python39-pulp_manifestUpgrade rubygem-rest-clientUpgrade rubygem-unicodeUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-localeUpgrade rubygem-domain_nameUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-cookieUpgrade rubygem-http-acceptUpgrade satellite-cliUpgrade rubygem-powerbarUpgrade rubygem-version_gemUpgrade rubygem-hashieUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-loggingUpgrade rubygem-multi_jsonUpgrade rubygem-ffi-debuginfoUpgrade rubygem-apipie-bindingsUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_discovery | May 4, 2023 | Sep 5, 2022 |
| Rocky_linux | — | Upgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfo | Mar 12, 2024 | Sep 5, 2022 |
| Suse | — | Upgrade snakeyaml-javadocUpgrade snakeyaml | Oct 26, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade libyaml-snake-javaUpgrade libyaml-snake-java (Ubuntu Pro) | Mar 22, 2023 | Sep 5, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub