Lucene search
+L

630 matches found

OSV
OSV
added 2022/09/05 10:15 a.m.7 views

UBUNTU-CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01515EPSS
SaveExploits0References5
OSV
OSV
added 2022/09/05 10:15 a.m.4 views

UBUNTU-CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.7AI score0.0165EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.38 views

CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01047EPSS
SaveExploits1References4
Prion
Prion
added 2022/09/05 10:15 a.m.42 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

4CVSS7.7AI score0.01515EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.44 views

CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01515EPSS
SaveExploits0References4
Prion
Prion
added 2022/09/05 10:15 a.m.24 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

4CVSS7.7AI score0.0165EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.35 views

CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS6.8AI score0.02101EPSS
SaveExploits0References3
Prion
Prion
added 2022/09/05 10:15 a.m.21 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

1.9CVSS7.1AI score0.01047EPSS
SaveExploits1References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.37 views

CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.0165EPSS
SaveExploits0References4
OSV
OSV
added 2022/09/05 10:15 a.m.4 views

UBUNTU-CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS6.8AI score0.02101EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/05 12:0 a.m.5 views

SnakeYAML 缓冲区错误漏洞

SnakeYAML is a Java-based YAML parser. SnakeYAML suffers from a buffer error vulnerability that stems from the fact that parsing untrusted YAML files may be susceptible to a denial of service attack DOS. If the parser is run on user-supplied input, an attacker can cause the parser to crash due to...

6.5CVSS7AI score0.01047EPSS
SaveExploits1References16
Positive Technologies
Positive Technologies
added 2022/09/05 12:0 a.m.3 views

PT-2022-6915 · Snakeyaml +5 · Snakeyaml +5

Name of the Vulnerable Software and Affected Versions: snakeYAML affected versions not specified Description: The issue is related to a Denial of Service DOS attack that can occur when using snakeYAML to parse untrusted YAML files. If the parser is running on user-supplied input, an attacker may...

9CVSS6.6AI score0.22709EPSS
SaveExploits3References72
Positive Technologies
Positive Technologies
added 2022/09/05 12:0 a.m.3 views

PT-2022-6916 · Snakeyaml +5 · Snakeyaml +5

Name of the Vulnerable Software and Affected Versions: snakeYAML affected versions not specified Description: The issue is related to the parsing of untrusted YAML files, which may lead to Denial of Service attacks. An attacker can supply content that causes the parser to crash due to a stack...

9CVSS6.6AI score0.22709EPSS
SaveExploits3References72
Vulnrichment
Vulnrichment
added 2022/09/05 12:0 a.m.9 views

CVE-2022-38751 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.5AI score0.01515EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/09/05 12:0 a.m.24 views

CVE-2022-38750 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.5AI score0.01047EPSS
SaveExploits1References5
CVE
CVE
added 2022/09/05 12:0 a.m.595 views

CVE-2022-38750

CVE-2022-38750 concerns the SnakeYAML YAML parser. Multiple connected sources confirm the issue: parsing untrusted YAML can lead to a Denial of Service via stack overflow, impacting availability. The vulnerability is associated with the SnakeYAML package (Java) and is addressed in various advisor...

6.5CVSS6.4AI score0.01047EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
added 2022/09/05 12:0 a.m.48 views

CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.3AI score0.0165EPSS
SaveExploits0
OSV
OSV
added 2022/09/05 12:0 a.m.39 views

CVE-2022-38751 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.7AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2022/09/05 12:0 a.m.19 views

CVE-2022-38750 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.7AI score0.01047EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/09/05 12:0 a.m.5 views

SnakeYAML 缓冲区错误漏洞

SnakeYAML is a Java-based YAML parser. SnakeYAML suffers from a buffer error vulnerability that stems from the fact that parsing untrusted YAML files may be susceptible to a denial of service attack DOS. If the parser is run on user-supplied input, an attacker can cause the parser to crash due to...

6.5CVSS7AI score0.0165EPSS
SaveExploits0References18
Rows per page
Query Builder