Go Yaml File Processing Heap Buffer Overflow DoS

🗓️ 09 Oct 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Uncontrolled resource consumption in the Go Yaml file processing library causes service failure.

Reporter	Title	Published	Views	Family All 215
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion and IBM Storage Fusion HCI may be vulnerable to denial of service and link following via Go-Yaml, kube-apiserver, Golang Go and Beego	29 Aug 202321:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Connector for SAP is affected by security vulnerabilities	2 Apr 202418:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Mar 202503:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in the Golang language affects IBM Event Streams (CVE-2022-3064)	6 Mar 202307:49	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0050: container-tools:rhel8 (ALINUX3-SA-2024:0050)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : container-tools:4.0 (ALSA-2023:6938)	2 Jul 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: etcd / packer (CVE-2022-3064)	10 Feb 202500:00	–	nessus
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: crit / criu / criu-debuginfo / criu-debugsource / criu-devel / etc Multiple Vulnerabilities (ciqsa-2026_0845)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0846)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0847)	1 Oct 202600:00	–	nessus

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-3064
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-3064
deb	www.deb.freexian.com/extended-lts/tracker/CVE-2022-3064
github	www.github.com/go-yaml/yaml/commit/f221b8435cfb71e54062f6c6e99e9ade30b124d5
github	www.github.com/go-yaml/yaml/releases/tag/v2.2.4
pkg	www.pkg.go.dev/vuln/GO-2022-0956
lk	www.lk.astra.ru/
ubuntu	www.ubuntu.com/security/CVE-2022-3064
access	www.access.redhat.com/security/cve/CVE-2022-3064
web	www.web.nvd.nist.gov/view/vuln/detail

09 Oct 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 37.5

CVSS 27.8

EPSS0.01778

Go Yaml file processing library resource consumption service failure