Lucene search
PRIOn knowledge basePRION:CVE-2022-41854HistoryNov 11, 2022 - 1:15 p.m.
Stack overflow
2022-11-1113:15:00
PRIOn knowledge base
www.prio-n.com
11
Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.
References
bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355
lists.fedoraproject.org/archives/list/[email protected]/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE/
lists.fedoraproject.org/archives/list/[email protected]/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR/
lists.fedoraproject.org/archives/list/[email protected]/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J/
Related
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer operands may be vulnerable to denial of service due to CVE-2022-41854
2022-12-09 10:03:16
cvelist
cvelist
CVE-2022-41854 Stack Overflow in Snakeyaml
2022-11-11 00:00:00
cve
cve
CVE-2022-41854
2022-11-11 13:15:11
redos
redos
ROS-20240514-05
2024-05-14 00:00:00
nvd
nvd
CVE-2022-41854
2022-11-11 13:15:11
github
github
Snakeyaml vulnerable to Stack overflow leading to denial of service
2022-11-11 19:00:31
redhatcve
redhatcve
CVE-2022-41854
2022-12-09 13:34:48
openvas
openvas
Fedora: Security Advisory for picocli (FEDORA-2023-27ec59a486)
2023-07-08 00:00:00
Fedora: Security Advisory for snakeyaml (FEDORA-2022-8a4e8aa190)
2022-12-21 00:00:00
Fedora: Security Advisory for snakeyaml (FEDORA-2022-c01dd659fa)
2022-12-21 00:00:00
debiancve
debiancve
CVE-2022-41854
2022-11-11 13:15:11
osv
osv
Snakeyaml vulnerable to Stack overflow leading to denial of service
2022-11-11 19:00:31
CVE-2022-41854
2022-11-11 13:15:11
veracode
veracode
Denial Of Service (DoS)
2022-11-17 12:37:25
nessus
nessus
Fedora 38 : picocli (2023-27ec59a486)
2023-07-06 00:00:00
RHEL 7 : dev-java_snakeyaml (Unpatched Vulnerability)
2024-05-11 00:00:00
Fedora 36 : snakeyaml (2022-8a4e8aa190)
2022-12-23 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: picocli-4.7.4-1.fc38
2023-07-06 02:19:58
[SECURITY] Fedora 36 Update: snakeyaml-1.32-1.fc36
2022-12-21 01:18:24
[SECURITY] Fedora 37 Update: snakeyaml-1.32-1.fc37
2022-12-21 01:29:20
ubuntucve
ubuntucve
CVE-2022-41854
2022-11-11 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-41854 affecting package snakeyaml 1.25-2
2024-06-18 09:08:18
redhat
redhat