Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Jan 10, 2024 | Sep 5, 2022 |
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-debugsourceUpgrade rubygem-mime-typesUpgrade rubygem-snaky_hashUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-fast_gettextUpgrade rubygem-amazing_printUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffi-debugsourceUpgrade rubygem-jwtUpgrade satellite-cloneUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unicodeUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cliUpgrade rubygem-gssapiUpgrade rubygem-apipie-bindingsUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-ffiUpgrade rubygem-unicode-display_widthUpgrade rubygem-hashieUpgrade rubygem-rest-clientUpgrade satellite-maintainUpgrade foreman-cliUpgrade rubygem-hammer_cli_foremanUpgrade python39-pulp_manifestUpgrade rubygem-unfUpgrade rubygem-netrcUpgrade rubygem-domain_nameUpgrade rubygem-clampUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-powerbarUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-version_gemUpgrade rubygem-unf_extUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintainUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_admin | May 4, 2023 | Sep 5, 2022 |
| Debian | — | Upgrade snakeyaml | Oct 4, 2022 | Sep 5, 2022 |
| Gentoo Linux | — | Upgrade dev-java/snakeyaml. | May 23, 2023 | Sep 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-ffi-debuginfoUpgrade rubygem-version_gemUpgrade rubygem-gssapiUpgrade rubygem-jwtUpgrade foreman-cliUpgrade rubygem-clampUpgrade rubygem-oauthUpgrade rubygem-hashieUpgrade rubygem-unfUpgrade rubygem-ffi-debugsourceUpgrade rubygem-mime-types-dataUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-localeUpgrade rubygem-fast_gettextUpgrade rubygem-unicode-debuginfoUpgrade rubygem-rest-clientUpgrade rubygem-foreman_maintainUpgrade rubygem-highlineUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cliUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade python39-pulp_manifestUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-unicode-display_widthUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-netrcUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-ffiUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_adminUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-oauth-ttyUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-little-pluggerNo solution existsUpgrade satellite-cliUpgrade rubygem-multi_jsonUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_remote_execution | May 4, 2023 | Sep 5, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-debuginfo | Mar 12, 2024 | Sep 5, 2022 |
| Suse | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Oct 26, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade libyaml-snake-javaUpgrade libyaml-snake-java (Ubuntu Pro) | Mar 22, 2023 | Sep 5, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub