The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Jan 10, 2024 | Sep 5, 2022 |
| Centos_linux | — | Upgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hashieUpgrade rubygem-powerbarUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-http-cookieUpgrade rubygem-oauthUpgrade rubygem-ffiUpgrade rubygem-clampUpgrade rubygem-domain_nameUpgrade satellite-cliUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-version_gemUpgrade foreman-cliUpgrade rubygem-netrcUpgrade rubygem-unfUpgrade rubygem-unicode-display_widthUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-highlineUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicodeUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-oauth-ttyUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-snaky_hashUpgrade rubygem-apipie-bindingsUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cliUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-gssapiUpgrade satellite-cloneUpgrade rubygem-jwtUpgrade rubygem-ffi-debuginfoUpgrade rubygem-fast_gettextUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_discovery | May 4, 2023 | Sep 5, 2022 |
| Debian | — | Upgrade snakeyaml | Oct 4, 2022 | Sep 5, 2022 |
| Gentoo Linux | — | Upgrade dev-java/snakeyaml. | May 23, 2023 | Sep 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-snaky_hashUpgrade rubygem-clampUpgrade rubygem-mime-types-dataUpgrade rubygem-oauthUpgrade rubygem-ffi-debugsourceUpgrade rubygem-highlineUpgrade rubygem-rest-clientUpgrade foreman-cliUpgrade rubygem-localeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-fast_gettextUpgrade rubygem-foreman_maintainUpgrade rubygem-unfUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-version_gemUpgrade rubygem-gssapiUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hashieUpgrade rubygem-jwtUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_azure_rmNo solution existsUpgrade rubygem-unicodeUpgrade rubygem-http-cookieUpgrade rubygem-mime-typesUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-domain_nameUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-oauth-ttyUpgrade rubygem-http-acceptUpgrade rubygem-loggingUpgrade satellite-cliUpgrade rubygem-multi_jsonUpgrade rubygem-unicode-debugsourceUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-ffiUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_remote_execution | May 4, 2023 | Sep 5, 2022 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | Sep 5, 2022 |
| Suse | — | Upgrade snakeyaml-javadocUpgrade snakeyaml | Oct 26, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade libyaml-snake-javaUpgrade libyaml-snake-java (Ubuntu Pro) | Mar 22, 2023 | Sep 5, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub