CVE-2024-35329

2024-06-1105:15:53

Debian Security Bug Tracker

security-tracker.debian.org

libyaml vulnerability buffer overflow heap-based unix api.c cve-2024-35329

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

libyaml 0.2.5 is vulnerable to a heap-based Buffer Overflow in yaml_document_add_sequence in api.c.

OSVersionArchitecturePackageVersionFilename
Debian12alllibyaml<= 0.2.5-1libyaml_0.2.5-1_all.deb
Debian11alllibyaml<= 0.2.2-1libyaml_0.2.2-1_all.deb
Debian10alllibyaml<= 0.2.1-1libyaml_0.2.1-1_all.deb
Debian999alllibyaml<= 0.2.5-1libyaml_0.2.5-1_all.deb
Debian13alllibyaml<= 0.2.5-1libyaml_0.2.5-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libyaml	<= 0.2.5-1	libyaml_0.2.5-1_all.deb
Debian	11	all	libyaml	<= 0.2.2-1	libyaml_0.2.2-1_all.deb
Debian	10	all	libyaml	<= 0.2.1-1	libyaml_0.2.1-1_all.deb
Debian	999	all	libyaml	<= 0.2.5-1	libyaml_0.2.5-1_all.deb
Debian	13	all	libyaml	<= 0.2.5-1	libyaml_0.2.5-1_all.deb