Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade snakeyaml-javadocUpgrade snakeyaml | Feb 8, 2024 | Sep 5, 2022 |
| Centos_linux | — | Upgrade rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-ffiUpgrade rubygem-version_gemUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-maintainUpgrade rubygem-jwtUpgrade rubygem-highlineUpgrade rubygem-loggingUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-debugsourceUpgrade rubygem-mime-typesUpgrade rubygem-unicode-debuginfoUpgrade satellite-cliUpgrade rubygem-netrcUpgrade rubygem-fast_gettextUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-amazing_printUpgrade foreman-cliUpgrade rubygem-powerbarUpgrade rubygem-hammer_cliUpgrade rubygem-unicodeUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-ffi-debuginfoUpgrade rubygem-rest-clientUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unf_extUpgrade rubygem-snaky_hashUpgrade rubygem-domain_nameUpgrade rubygem-oauth-ttyUpgrade rubygem-localeUpgrade rubygem-apipie-bindingsUpgrade rubygem-mime-types-dataUpgrade rubygem-http-cookieUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-ffi-debugsourceUpgrade python39-pulp_manifestUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintain | May 4, 2023 | Sep 5, 2022 |
| Debian | — | Upgrade snakeyaml | Jul 30, 2024 | Sep 5, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Gentoo Linux | — | Upgrade dev-java/snakeyaml. | May 23, 2023 | Sep 5, 2022 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 5, 2022 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Sep 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-loggingUpgrade rubygem-netrcUpgrade satellite-cliUpgrade rubygem-clampUpgrade rubygem-http-acceptUpgrade rubygem-snaky_hashUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_templatesNo solution existsUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_adminUpgrade python39-pulp_manifestUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_extUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-localeUpgrade rubygem-hammer_cli_katelloUpgrade satellite-maintainUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debugsourceUpgrade rubygem-version_gemUpgrade rubygem-http-cookieUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-gssapiUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-ffi-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-amazing_printUpgrade rubygem-mime-types-dataUpgrade rubygem-unicodeUpgrade rubygem-hammer_cliUpgrade rubygem-hashieUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-oauth-ttyUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-domain_nameUpgrade rubygem-foreman_maintainUpgrade foreman-cliUpgrade rubygem-highlineUpgrade satellite-clone | May 4, 2023 | Sep 5, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfo | Mar 12, 2024 | Sep 5, 2022 |
| Suse | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Oct 26, 2022 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub