vulnerability

Red Hat JBoss EAP: CVE-2022-41854: Stack-based Buffer Overflow

Try Surface Command
Back to search
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Published
Nov 13, 2022
Added
Sep 19, 2024
Modified
Jul 9, 2025

Description

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.

Solution

red-hat-jboss-eap-upgrade-latest

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

    Try it today