Lucene search
+L

650 matches found

OSV
OSV
added 2022/09/05 10:15 a.m.9 views

UBUNTU-CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01892EPSS
SaveExploits0References5
OSV
OSV
added 2022/09/05 10:15 a.m.8 views

UBUNTU-CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.7AI score0.02061EPSS
SaveExploits0References5
Prion
Prion
added 2022/09/05 10:15 a.m.45 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

4CVSS7.7AI score0.01892EPSS
SaveExploits0References4Affected Software2
Prion
Prion
added 2022/09/05 10:15 a.m.27 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

4CVSS7.7AI score0.02061EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.47 views

CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01892EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.42 views

CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01253EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.40 views

CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.02061EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.38 views

CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS6.8AI score0.02526EPSS
SaveExploits0References3
OSV
OSV
added 2022/09/05 10:15 a.m.6 views

UBUNTU-CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS6.8AI score0.02526EPSS
SaveExploits0References4
Prion
Prion
added 2022/09/05 10:15 a.m.24 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

1.9CVSS7.1AI score0.01253EPSS
SaveExploits1References4Affected Software2
Positive Technologies
Positive Technologies
added 2022/09/05 12:00 a.m.6 views

PT-2022-6916 · Snakeyaml +5 · Snakeyaml +5

Name of the Vulnerable Software and Affected Versions: snakeYAML affected versions not specified Description: The issue is related to the parsing of untrusted YAML files, which may lead to Denial of Service attacks. An attacker can supply content that causes the parser to crash due to a stack...

9CVSS6.6AI score0.22709EPSS
SaveExploits3References72
Positive Technologies
Positive Technologies
added 2022/09/05 12:00 a.m.7 views

PT-2022-6915 · Snakeyaml +5 · Snakeyaml +5

Name of the Vulnerable Software and Affected Versions: snakeYAML affected versions not specified Description: The issue is related to a Denial of Service DOS attack that can occur when using snakeYAML to parse untrusted YAML files. If the parser is running on user-supplied input, an attacker may...

9CVSS6.6AI score0.22709EPSS
SaveExploits3References72
CNNVD
CNNVD
added 2022/09/05 12:00 a.m.8 views

SnakeYAML 缓冲区错误漏洞

SnakeYAML is a Java-based YAML parser. SnakeYAML suffers from a buffer error vulnerability that stems from the fact that parsing untrusted YAML files may be susceptible to a denial of service attack DOS. If the parser is run on user-supplied input, an attacker can cause the parser to crash due to...

6.5CVSS7AI score0.01253EPSS
SaveExploits1References16
Cvelist
Cvelist
added 2022/09/05 12:00 a.m.50 views

CVE-2022-38750 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.5AI score0.01253EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2022/09/05 12:00 a.m.12 views

CVE-2022-38751 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.5AI score0.01892EPSS
SaveExploits0References5
CVE
CVE
added 2022/09/05 12:00 a.m.621 views

CVE-2022-38750

CVE-2022-38750 concerns the SnakeYAML YAML parser. Multiple connected sources confirm the issue: parsing untrusted YAML can lead to a Denial of Service via stack overflow, impacting availability. The vulnerability is associated with the SnakeYAML package (Java) and is addressed in various advisor...

6.5CVSS6.4AI score0.01253EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/09/05 12:00 a.m.41 views

CVE-2022-38751 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.7AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2022/09/05 12:00 a.m.71 views

CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.3AI score0.02061EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/09/05 12:00 a.m.51 views

CVE-2022-38751 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS7AI score0.01892EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/09/05 12:00 a.m.9 views

SnakeYAML 缓冲区错误漏洞

SnakeYAML is a Java-based YAML parser. SnakeYAML suffers from a buffer error vulnerability that stems from the fact that parsing untrusted YAML files may be susceptible to a denial of service attack DOS. If the parser is run on user-supplied input, an attacker can cause the parser to crash due to...

6.5CVSS7AI score0.02061EPSS
SaveExploits0References18
Rows per page
Query Builder