Lucene search
AmazonALAS-2015-482HistoryFeb 11, 2015 - 7:39 p.m.
Medium: perl-YAML-LibYAML
2015-02-1119:39:00
alas.aws.amazon.com
6
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.018 Low
EPSS
Percentile
88.2%
Issue Overview:
An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash.
Affected Packages:
perl-YAML-LibYAML
Issue Correction:
Run yum update perl-YAML-LibYAML to update your system.
New Packages:
i686:
perl-YAML-LibYAML-0.59-1.16.amzn1.i686
perl-YAML-LibYAML-debuginfo-0.59-1.16.amzn1.i686
src:
perl-YAML-LibYAML-0.59-1.16.amzn1.src
x86_64:
perl-YAML-LibYAML-debuginfo-0.59-1.16.amzn1.x86_64
perl-YAML-LibYAML-0.59-1.16.amzn1.x86_64
Additional References
Red Hat: CVE-2014-9130
Mitre: CVE-2014-9130
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | perl-yaml-libyaml | < 0.59-1.16.amzn1 | perl-YAML-LibYAML-0.59-1.16.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | perl-yaml-libyaml-debuginfo | < 0.59-1.16.amzn1 | perl-YAML-LibYAML-debuginfo-0.59-1.16.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | perl-yaml-libyaml-debuginfo | < 0.59-1.16.amzn1 | perl-YAML-LibYAML-debuginfo-0.59-1.16.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | perl-yaml-libyaml | < 0.59-1.16.amzn1 | perl-YAML-LibYAML-0.59-1.16.amzn1.x86_64.rpm |
Related
oraclelinux
oraclelinux
libyaml security update
2015-01-28 00:00:00
redhat
redhat
(RHSA-2015:0100) Moderate: libyaml security update
2015-01-28 00:00:00
(RHSA-2015:0112) Moderate: libyaml security update
2015-02-02 00:00:00
(RHSA-2015:0260) Moderate: libyaml security update
2015-02-23 12:46:35
nessus
nessus
CentOS 6 / 7 : libyaml (CESA-2015:0100)
2015-01-29 00:00:00
Ubuntu 14.04 LTS : LibYAML vulnerability (USN-2461-1)
2015-01-13 00:00:00
Fedora 21 : perl-YAML-LibYAML-0.54-1.fc21 (2014-16143)
2014-12-15 00:00:00
debian
debian
[SECURITY] [DSA 3103-1] libyaml-libyaml-perl security update
2014-12-13 16:33:57
[SECURITY] [DSA 3115-1] pyyaml security update
2014-12-29 21:34:30
[SECURITY] [DLA 109-1] libyaml-libyaml-perl security update
2014-12-14 13:49:40
fedora
fedora
[SECURITY] Fedora 20 Update: PyYAML-3.10-11.fc20
2015-04-05 14:35:53
[SECURITY] Fedora 21 Update: PyYAML-3.11-7.fc21
2015-04-05 14:33:31
[SECURITY] Fedora 21 Update: libyaml-0.1.6-6.fc21
2014-12-13 09:37:28
ubuntu
ubuntu
LibYAML vulnerability
2015-01-12 00:00:00
libyaml-libyaml-perl vulnerability
2015-01-12 00:00:00
PyYAML vulnerability
2015-01-12 00:00:00
mageia
mageia
Updated yaml & perl-YAML-LibYAML packages fix CVE-2014-9130
2014-12-05 18:54:13
Updated python-yaml packages fix security vulnerability
2015-01-05 19:30:30
ubuntucve
ubuntucve
CVE-2014-9130
2014-12-08 00:00:00
amazon
amazon
Medium: libyaml
2015-02-11 19:38:00
openvas
openvas
CentOS Update for libyaml CESA-2015:0100 centos6
2015-01-29 00:00:00
Fedora Update for PyYAML FEDORA-2015-4477
2015-04-06 00:00:00
Mageia: Security Advisory (MGASA-2015-0004)
2022-01-28 00:00:00
securityvulns
securityvulns
libYAML DoS
2014-12-22 00:00:00
[SECURITY] [DSA 3102-1] libyaml security update
2014-12-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2017-06-15 08:10:06
Denial Of Service (DoS)
2019-01-15 09:04:15
Denial Of Service (DoS)
2019-06-07 05:07:49
alpinelinux
alpinelinux
CVE-2014-9130
2014-12-08 16:59:00
centos
centos
libyaml security update
2015-01-28 22:40:28
hackerone
hackerone
Ruby: Ruby 2.3.x and 2.2.x still bundle DoS vulnerable verision of libYAML
2017-06-02 14:29:02
osv
osv
libyaml-libyaml-perl - security update
2014-12-14 00:00:00
libyaml - security update
2014-12-13 00:00:00
debiancve
debiancve
CVE-2014-9130
2014-12-08 16:59:00
cloudfoundry
cloudfoundry
CVE-2014-9130: LibYAML vulnerability | Cloud Foundry
2016-09-21 00:00:00
prion
prion
Code injection
2014-12-08 16:59:00
cve
cve
CVE-2014-9130
2014-12-08 16:59:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.018 Low
EPSS
Percentile
88.2%
Related for ALAS-2015-482