Lucene search
AmazonALAS-2015-481HistoryFeb 11, 2015 - 7:38 p.m.
Medium: libyaml
2015-02-1119:38:00
alas.aws.amazon.com
10
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.018 Low
EPSS
Percentile
88.2%
Issue Overview:
An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. (CVE-2014-9130)
Affected Packages:
libyaml
Issue Correction:
Run yum update libyaml to update your system.
New Packages:
i686:
libyaml-devel-0.1.6-6.7.amzn1.i686
libyaml-debuginfo-0.1.6-6.7.amzn1.i686
libyaml-0.1.6-6.7.amzn1.i686
src:
libyaml-0.1.6-6.7.amzn1.src
x86_64:
libyaml-0.1.6-6.7.amzn1.x86_64
libyaml-devel-0.1.6-6.7.amzn1.x86_64
libyaml-debuginfo-0.1.6-6.7.amzn1.x86_64
Additional References
Red Hat: CVE-2014-9130
Mitre: CVE-2014-9130
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | libyaml-devel | < 0.1.6-6.7.amzn1 | libyaml-devel-0.1.6-6.7.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | libyaml-debuginfo | < 0.1.6-6.7.amzn1 | libyaml-debuginfo-0.1.6-6.7.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | libyaml | < 0.1.6-6.7.amzn1 | libyaml-0.1.6-6.7.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | libyaml | < 0.1.6-6.7.amzn1 | libyaml-0.1.6-6.7.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | libyaml-devel | < 0.1.6-6.7.amzn1 | libyaml-devel-0.1.6-6.7.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | libyaml-debuginfo | < 0.1.6-6.7.amzn1 | libyaml-debuginfo-0.1.6-6.7.amzn1.x86_64.rpm |
Related
nessus
nessus
Fedora 21 : perl-YAML-LibYAML-0.54-1.fc21 (2014-16143)
2014-12-15 00:00:00
Scientific Linux Security Update : libyaml on SL6.x, SL7.x i386/x86_64 (20150128)
2015-01-29 00:00:00
RHEL 6 / 7 : libyaml (RHSA-2015:0100)
2015-01-29 00:00:00
securityvulns
securityvulns
libYAML DoS
2014-12-22 00:00:00
[SECURITY] [DSA 3102-1] libyaml security update
2014-12-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2017-06-15 08:10:06
Denial Of Service (DoS)
2019-01-15 09:04:15
Denial Of Service (DoS)
2019-06-07 05:07:49
debian
debian
[SECURITY] [DSA 3115-1] pyyaml security update
2014-12-29 21:34:30
[SECURITY] [DSA 3103-1] libyaml-libyaml-perl security update
2014-12-13 16:33:57
[SECURITY] [DSA 3102-1] libyaml security update
2014-12-13 16:33:50
centos
centos
libyaml security update
2015-01-28 22:40:28
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2015-482)
2015-09-08 00:00:00
Mageia: Security Advisory (MGASA-2015-0004)
2022-01-28 00:00:00
CentOS Update for libyaml CESA-2015:0100 centos6
2015-01-29 00:00:00
alpinelinux
alpinelinux
CVE-2014-9130
2014-12-08 16:59:00
oraclelinux
oraclelinux
libyaml security update
2015-01-28 00:00:00
redhat
redhat
(RHSA-2015:0100) Moderate: libyaml security update
2015-01-28 00:00:00
(RHSA-2015:0112) Moderate: libyaml security update
2015-02-02 00:00:00
(RHSA-2015:0260) Moderate: libyaml security update
2015-02-23 12:46:35
fedora
fedora
[SECURITY] Fedora 20 Update: PyYAML-3.10-11.fc20
2015-04-05 14:35:53
[SECURITY] Fedora 21 Update: PyYAML-3.11-7.fc21
2015-04-05 14:33:31
[SECURITY] Fedora 21 Update: libyaml-0.1.6-6.fc21
2014-12-13 09:37:28
ubuntucve
ubuntucve
CVE-2014-9130
2014-12-08 00:00:00
mageia
mageia
Updated yaml & perl-YAML-LibYAML packages fix CVE-2014-9130
2014-12-05 18:54:13
Updated python-yaml packages fix security vulnerability
2015-01-05 19:30:30
ubuntu
ubuntu
LibYAML vulnerability
2015-01-12 00:00:00
PyYAML vulnerability
2015-01-12 00:00:00
libyaml-libyaml-perl vulnerability
2015-01-12 00:00:00
hackerone
hackerone
Ruby: Ruby 2.3.x and 2.2.x still bundle DoS vulnerable verision of libYAML
2017-06-02 14:29:02
osv
osv
libyaml-libyaml-perl - security update
2014-12-14 00:00:00
libyaml - security update
2014-12-13 00:00:00
debiancve
debiancve
CVE-2014-9130
2014-12-08 16:59:00
prion
prion
Code injection
2014-12-08 16:59:00
cve
cve
CVE-2014-9130
2014-12-08 16:59:00
cloudfoundry
cloudfoundry
CVE-2014-9130: LibYAML vulnerability | Cloud Foundry
2016-09-21 00:00:00
amazon
amazon
Medium: perl-YAML-LibYAML
2015-02-11 19:39:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.018 Low
EPSS
Percentile
88.2%
Related for ALAS-2015-481