Lucene search
GoogleOSV:CVE-2021-4235HistoryDec 27, 2022 - 10:15 p.m.
CVE-2021-4235
2022-12-2722:15:11
Google
osv.dev
14
yaml
alias chasing
denial of service
crafted file
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6
Confidence
High
EPSS
0.001
Percentile
28.9%
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.
Related
redhatcve
redhatcve
CVE-2021-4235
2022-12-28 11:35:02
prion
prion
Denial of service
2022-12-27 22:15:00
debiancve
debiancve
CVE-2021-4235
2022-12-27 22:15:11
nvd
nvd
CVE-2021-4235
2022-12-27 22:15:11
gitlab
gitlab
Uncontrolled Resource Consumption
2022-12-27 00:00:00
YAML Go package vulnerable to denial of service
2022-12-28 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-4235 affecting package etcd 3.5.1-6
2022-12-27 17:58:52
veracode
veracode
Denial Of Service (DoS)
2022-12-30 10:49:32
ubuntucve
ubuntucve
CVE-2021-4235
2022-12-27 00:00:00
wolfi
wolfi
CVE-2021-4235 vulnerabilities
2024-07-22 17:13:40
osv
osv
Denial of service in gopkg.in/yaml.v2
2021-04-14 20:04:52
YAML Go package vulnerable to denial of service
2022-12-28 00:30:23
golang-yaml.v2 vulnerabilities
2023-08-14 08:42:37
cve
cve
CVE-2021-4235
2022-12-27 22:15:11
github
github
YAML Go package vulnerable to denial of service
2022-12-28 00:30:23
redhat
redhat
cvelist
cvelist
CVE-2021-4235 Denial of service in gopkg.in/yaml.v2
2022-12-27 21:13:42
cgr
cgr
CVE-2021-4235 vulnerabilities
2024-05-19 03:07:16
nessus
nessus
Debian DLA-3479-1 : golang-yaml.v2 - LTS security update
2023-07-06 00:00:00
RHEL 8 / 9 : OpenShift Container Platform 4.12.0 (RHSA-2022:7398)
2024-04-28 00:00:00
debian
debian
[SECURITY] [DLA 3479-1] golang-yaml.v2 security update
2023-07-05 20:29:31
openvas
openvas
Ubuntu: Security Advisory (USN-6287-1)
2023-08-14 00:00:00
Debian: Security Advisory (DLA-3479-1)
2023-07-06 00:00:00
ubuntu
ubuntu
Go yaml vulnerabilities
2023-08-14 00:00:00
ibm
ibm
Security Bulletin: IBM Planning Analytics Connector for SAP is affected by security vulnerabilities
2024-04-02 18:29:22
Security Bulletin: IBM Storage Fusion and IBM Storage Fusion HCI may be vulnerable to denial of service and link following via Go-Yaml, kube-apiserver, Golang Go and Beego
2023-08-29 21:46:23
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-07-03 18:48:48
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6
Confidence
High
EPSS
0.001
Percentile
28.9%
Related for OSV:CVE-2021-4235