Search CVE reports
1 – 10 of 12 results
YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the...
1 affected package
libyaml-perl
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libyaml-perl | Not affected | Not affected | Not affected | Not affected | Fixed |
YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls...
1 affected package
libyaml-perl
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libyaml-perl | Not affected | Not affected | Not affected | Not affected | Fixed |
backtracking leading to exponential load time
1 affected package
libyaml-perl
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libyaml-perl | Fixed | Fixed | Fixed | Fixed | Fixed |
Some fixes available 2 of 6
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
1 affected package
libyaml-libyaml-perl
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libyaml-libyaml-perl | Not affected | Fixed | Fixed | Needs evaluation | Needs evaluation |
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
4 affected packages
golang-goyaml, golang-yaml.v2, libyaml, libyaml-libyaml-perl
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-goyaml | — | Not in release | Not in release | Not in release | — |
| golang-yaml.v2 | — | Not affected | Not affected | Not affected | Not affected |
| libyaml | — | Not affected | Not affected | Not affected | Not affected |
| libyaml-libyaml-perl | — | Not affected | Not affected | Not affected | Not affected |
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
4 affected packages
golang-goyaml, golang-yaml.v2, libyaml, libyaml-libyaml-perl
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-goyaml | — | Not in release | Not in release | Not in release | — |
| golang-yaml.v2 | — | Not affected | Not affected | Not affected | Not affected |
| libyaml | — | Not affected | Not affected | Not affected | Not affected |
| libyaml-libyaml-perl | — | Not affected | Not affected | Not affected | Not affected |
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
4 affected packages
golang-goyaml, golang-yaml.v2, libyaml, libyaml-libyaml-perl
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-goyaml | — | Not in release | Not in release | Not in release | — |
| golang-yaml.v2 | — | Not affected | Not affected | Not affected | Not affected |
| libyaml | — | Not affected | Not affected | Not affected | Not affected |
| libyaml-libyaml-perl | — | Not affected | Not affected | Not affected | Not affected |
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
4 affected packages
golang-goyaml, golang-yaml.v2, libyaml, libyaml-libyaml-perl
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-goyaml | — | Not in release | Not in release | Not in release | — |
| golang-yaml.v2 | — | Not affected | Not affected | Not affected | Not affected |
| libyaml | — | Not affected | Not affected | Not affected | Not affected |
| libyaml-libyaml-perl | — | Not affected | Not affected | Not affected | Not affected |
Some fixes available 9 of 12
scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.
3 affected packages
libyaml, libyaml-libyaml-perl, pyyaml
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libyaml | — | — | — | — | — |
| libyaml-libyaml-perl | — | — | — | — | — |
| pyyaml | — | — | — | — | — |
Some fixes available 6 of 8
Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.
2 affected packages
libyaml, libyaml-libyaml-perl
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libyaml | — | — | — | — | — |
| libyaml-libyaml-perl | — | — | — | — | — |