486 matches found
CVE-2024-35325
CVE-2024-35325 is an IBM/LibYAML-related issue described in connected documents as a double-free in yaml_event_delete in LibYAML. The IBM bullet for Watson Speech Services Cartridge (and related entries) cites LibYAML double-free enabling remote code execution, with remediation to upgrade to a fi...
Number withdrawn
libyaml is a codec library for YAML from the YAML community. This CVE number has been withdrawn...
CVE-2024-35326
CVE-2024-35326 is rejected/not used; this entry does not represent an active vulnerability.
Number withdrawn
libyaml is a codec library for YAML from the YAML community. This CVE number has been withdrawn...
PT-2024-26433 · Libyaml · Libyaml
Name of the Vulnerable Software and Affected Versions: libyaml versions up to 0.2.5 Description: A vulnerability was found in libyaml, affecting the function yaml event delete of the file /src/libyaml/src/api.c. The manipulation leads to a double-free. Recommendations: For libyaml versions up to...
PT-2024-26434 · Libyaml · Libyaml
Name of the Vulnerable Software and Affected Versions: libyaml version 0.2.5 Description: The issue is related to a Buffer Overflow vulnerability. It affects the yaml emitter emit function in the /src/libyaml/src/emitter.c file. The manipulation leads to a double-free. Recommendations: For libyam...
CVE-2024-35328
CVE-2024-35328 is rejected/not used; this entry was withdrawn.
PT-2024-26435 · Libyaml · Libyaml
Name of the Vulnerable Software and Affected Versions: libyaml version 0.2.5 Description: The issue affects the function yaml parser parse of the file /src/libyaml/src/parser.c, making libyaml vulnerable to Denial of Service DDOS attacks. Recommendations: As a temporary workaround, consider...
Number withdrawn
libyaml is a codec library for YAML from the YAML community. This CVE number has been withdrawn...
CVE-2024-35329
A vulnerability was found in libyaml 0.2.5. This issue is caused by a heap-based buffer overflow in yamldocumentaddsequence in api.c...
CVE-2024-35329
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2024-35329
The connected documents indicate a vulnerability in libyaml 0.2.5, caused by a heap-based buffer overflow in yaml_document_add_sequence within api.c. The impact and exploitation specifics are not detailed in the provided sources. There is no publicly available remediation version stated in these ...
PT-2024-26436 · Libyaml · Libyaml
Name of the Vulnerable Software and Affected Versions: libyaml version 0.2.5 Description: The issue is related to a heap-based Buffer Overflow in the yaml document add sequence function in api.c. Recommendations: For libyaml version 0.2.5, at the moment, there is no information about a newer...