Lucene search
HistoryDec 27, 2022 - 10:15 p.m.
CVE-2021-4235
cve-2021-4235
unbounded alias chasing
yaml file
system resources
denial of service
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
40.8%
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.
Affected configurations
Node
yaml_projectyamlRange<2.2.3go
Related
ubuntucve
ubuntucve
CVE-2021-4235
2022-12-27 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-12-30 10:49:32
wolfi
wolfi
CVE-2021-4235 vulnerabilities
2024-09-06 15:16:38
gitlab
gitlab
Uncontrolled Resource Consumption
2022-12-27 00:00:00
YAML Go package vulnerable to denial of service
2022-12-28 00:00:00
debiancve
debiancve
CVE-2021-4235
2022-12-27 22:15:11
osv
osv
CVE-2021-4235
2022-12-27 22:15:11
YAML Go package vulnerable to denial of service
2022-12-28 00:30:23
Denial of service in gopkg.in/yaml.v2
2021-04-14 20:04:52
cbl_mariner
cbl_mariner
CVE-2021-4235 affecting package etcd 3.5.1-6
2022-12-27 17:58:52
cvelist
cvelist
CVE-2021-4235 Denial of service in gopkg.in/yaml.v2
2022-12-27 21:13:42
redhat
redhat
github
github
YAML Go package vulnerable to denial of service
2022-12-28 00:30:23
cve
cve
CVE-2021-4235
2022-12-27 22:15:11
cgr
cgr
CVE-2021-4235 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2021-4235
2022-12-28 11:35:02
prion
prion
Denial of service
2022-12-27 22:15:00
nessus
nessus
Debian DLA-3479-1 : golang-yaml.v2 - LTS security update
2023-07-06 00:00:00
RHEL 8 / 9 : OpenShift Container Platform 4.12.0 (RHSA-2022:7398)
2024-04-28 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3479-1)
2023-07-06 00:00:00
Ubuntu: Security Advisory (USN-6287-1)
2023-08-14 00:00:00
ubuntu
ubuntu
Go yaml vulnerabilities
2023-08-14 00:00:00
debian
debian
[SECURITY] [DLA 3479-1] golang-yaml.v2 security update
2023-07-05 20:29:31
ibm
ibm
Security Bulletin: IBM Planning Analytics Connector for SAP is affected by security vulnerabilities
2024-04-02 18:29:22
Security Bulletin: IBM Storage Fusion and IBM Storage Fusion HCI may be vulnerable to denial of service and link following via Go-Yaml, kube-apiserver, Golang Go and Beego
2023-08-29 21:46:23
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-07-03 18:48:48
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
40.8%
Related for NVD:CVE-2021-4235