Lucene search

K
redhatcveRedhat.comRH:CVE-2024-3205
HistoryApr 03, 2024 - 5:35 a.m.

CVE-2024-3205

2024-04-0305:35:59
redhat.com
access.redhat.com
31
cve-2024-3205
yaml file
heap-based buffer over-read
yaml_emitter_emit_flow_sequence_item
denial of service
untrusted sources

0.0004 Low

EPSS

Percentile

9.1%

A flaw was found in the libyaml library. A specially crafted YAML file can cause a heap-based buffer over-read in the yaml_emitter_emit_flow_sequence_item function in the src/emitter.c file, resulting in denial of service in the application linked to the library.

Mitigation

Applications that do not parse files from untrusted sources will not be vulnerable to this vulnerability.

0.0004 Low

EPSS

Percentile

9.1%