36 matches found
Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2019-1041)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2019-2299)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2019-1615)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2019-1056)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2019-1040)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2019-1224)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2020-1083)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization for ARM 64 3.0.5.0 : PyYAML (EulerOS-SA-2020-1083)
According to the version of the PyYAML package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In PyYAML before 4.1, the yaml.load API could execute arbitrary code. In other words, yaml.safeload is not...
EulerOS 2.0 SP8 : PyYAML (EulerOS-SA-2019-2299)
According to the version of the PyYAML packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In PyYAML before 5.1, the yaml.load API could execute arbitrary code if used with untrusted data. The load function has been deprecated in version...
Photon OS 1.0: Pyyaml PHSA-2019-1.0-0224
An update of the PyYAML package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0224. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid12508...
Fedora 30 : PyYAML (2019-44643e8bcb)
New upstream release 5.1 rhbz1688414 Fixes CVE-2017-18342 rhbz1595744 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
FreeBSD : py-yaml -- arbitrary code execution (f6ea18bb-65b9-11e9-8b31-002590045d9c)
pyyaml reports : the PyYAML.load function could be easily exploited to call any Python function. That means it could call any system command using os.system C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...
EulerOS Virtualization 2.5.4 : PyYAML (EulerOS-SA-2019-1224)
According to the version of the PyYAML package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In PyYAML before 4.1, the yaml.load API could execute arbitrary code. In other words, yaml.safeload is not...
EulerOS 2.0 SP5 : PyYAML (EulerOS-SA-2019-1041)
According to the version of the PyYAML package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In PyYAML before 4.1, the yaml.load API could execute arbitrary code. In other words, yaml.safeload is not used.CVE-2017-18342 Note that Tenable...
BELL-CVE-2017-18342 CVE-2017-18342 does not affect BellSoft software
Bulletin has no description...
CVE-2017-18342
CVE-2017-18342 affects PyYAML: in versions before 5.1, using yaml.load() with untrusted data could cause arbitrary code execution. The load() function was deprecated in 5.1 and UnsafeLoader was introduced for backward compatibility; several connected advisories reference partial/further fixes. Af...