Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2024-3205

HistoryApr 02, 2024 - 11:15 p.m.

CVE-2024-3205

2024-04-0223:15:54

Debian Security Bug Tracker

security-tracker.debian.org

yaml

libyaml

vulnerability

buffer overflow

heap-based

remote attack

disclosure

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function yaml_emitter_emit_flow_sequence_item of the file /src/libyaml/src/emitter.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259052. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

OSVersionArchitecturePackageVersionFilename
Debian12alllibyaml<= 0.2.5-1libyaml_0.2.5-1_all.deb
Debian11alllibyaml<= 0.2.2-1libyaml_0.2.2-1_all.deb
Debian10alllibyaml<= 0.2.1-1libyaml_0.2.1-1_all.deb
Debian999alllibyaml<= 0.2.5-1libyaml_0.2.5-1_all.deb
Debian13alllibyaml<= 0.2.5-1libyaml_0.2.5-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libyaml	<= 0.2.5-1	libyaml_0.2.5-1_all.deb
Debian	11	all	libyaml	<= 0.2.2-1	libyaml_0.2.2-1_all.deb
Debian	10	all	libyaml	<= 0.2.1-1	libyaml_0.2.1-1_all.deb
Debian	999	all	libyaml	<= 0.2.5-1	libyaml_0.2.5-1_all.deb
Debian	13	all	libyaml	<= 0.2.5-1	libyaml_0.2.5-1_all.deb