Lucene search
+L

634 matches found

OSV
OSV
added 2022/09/05 10:15 a.m.2 views

DEBIAN-CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

5.5CVSS6.4AI score0.01025EPSS
Exploits1References1
OSV
OSV
added 2022/09/05 10:15 a.m.2 views

DEBIAN-CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS7AI score0.01642EPSS
Exploits0References1
Prion
Prion
added 2022/09/05 10:15 a.m.19 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

1.9CVSS7.1AI score0.01025EPSS
Exploits1References4Affected Software2
Prion
Prion
added 2022/09/05 10:15 a.m.19 views

Stack overflow

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

4CVSS7.1AI score0.02091EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2022/09/05 10:15 a.m.21 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

4CVSS7.7AI score0.01642EPSS
Exploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.34 views

CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS6.8AI score0.02091EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.44 views

CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01507EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.38 views

CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01025EPSS
Exploits1References4
Prion
Prion
added 2022/09/05 10:15 a.m.40 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

4CVSS7.7AI score0.01507EPSS
Exploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.36 views

CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01642EPSS
Exploits0References4
OSV
OSV
added 2022/09/05 10:15 a.m.2 views

UBUNTU-CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.7AI score0.01642EPSS
Exploits0References5
OSV
OSV
added 2022/09/05 10:15 a.m.2 views

UBUNTU-CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS6.8AI score0.02091EPSS
Exploits0References4
OSV
OSV
added 2022/09/05 10:15 a.m.5 views

UBUNTU-CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01507EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2022/09/05 12:0 a.m.9 views

CVE-2022-38751 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.5AI score0.01507EPSS
Exploits0References5
CVE
CVE
added 2022/09/05 12:0 a.m.566 views

CVE-2022-38751

CVE-2022-38751 affects SnakeYAML (Java YAML parser). Issue: denial-of-service when parsing untrusted YAML, potentially via stack overflow. Public details in multiple advisories confirm affected packages and urge upgrade. Remediation per sources includes upgrading SnakeYAML to newer releases (e.g....

6.5CVSS7.4AI score0.01507EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/05 12:0 a.m.19 views

CVE-2022-38750 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.7AI score0.01025EPSS
Exploits1References5
CNNVD
CNNVD
added 2022/09/05 12:0 a.m.3 views

SnakeYAML 缓冲区错误漏洞

SnakeYAML is a Java-based YAML parser. SnakeYAML suffers from a buffer error vulnerability that stems from the fact that parsing untrusted YAML files may be susceptible to a denial of service attack DOS. If the parser is run on user-supplied input, an attacker can cause the parser to crash due to...

6.5CVSS7AI score0.01025EPSS
Exploits1References16
CNNVD
CNNVD
added 2022/09/05 12:0 a.m.2 views

SnakeYAML 缓冲区错误漏洞

SnakeYAML is a Java-based YAML parser. SnakeYAML suffers from a buffer error vulnerability that stems from the fact that parsing untrusted YAML files may be susceptible to a denial of service attack DOS. If the parser is run on user-supplied input, an attacker can cause the parser to crash due to...

6.5CVSS7.4AI score0.02091EPSS
Exploits0References17
Vulnrichment
Vulnrichment
added 2022/09/05 12:0 a.m.18 views

CVE-2022-38752 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS6.5AI score0.02091EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/09/05 12:0 a.m.2 views

SnakeYAML 缓冲区错误漏洞

SnakeYAML is a Java-based YAML parser. SnakeYAML suffers from a buffer error vulnerability that stems from the fact that parsing untrusted YAML files may be susceptible to a denial of service attack DOS. If the parser is run on user-supplied input, an attacker can cause the parser to crash due to...

6.5CVSS7.2AI score0.01507EPSS
Exploits0References16
Rows per page
Query Builder