372 matches found
PT-2014-1902
Name of the Vulnerable Software and Affected Versions LibYAML versions prior to 0.1.6 Description The issue is related to a heap-based buffer overflow in the yaml parser scan uri escapes function. This allows attackers to execute arbitrary code via a long sequence of percent-encoded characters in...
[SECURITY] [DSA 2884-1] libyaml security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2884-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 26, 2014 http://www.debian.org/security/faq -...
DSA-2870-1 libyaml-libyaml-perl - heap-based buffer overflow
Bulletin has no description...
[SECURITY] [DSA 2850-2] libyaml regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-2850-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 12, 2014 http://www.debian.org/security/faq -...
DEBIAN-CVE-2013-6393
The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...
PT-2014-1788
Name of the Vulnerable Software and Affected Versions LibYAML versions prior to 0.1.5 Description The issue is related to an incorrect cast in the yaml parser scan tag uri function, which can lead to a denial of service application crash and possibly allow remote attackers to execute arbitrary co...
DSA-2850-1 libyaml - heap-based buffer overflow
Bulletin has no description...
Ruby on Rails 3.0 and 2.3 JSON Parser vulnerability
Overview The Ruby on Rails 3.0 and 2.3 JSON parser contain a vulnerability that may result in arbitrary code execution. Description The Ruby on Rails advisory states:There is a vulnerability in the JSON code for Ruby on Rails which allows attackers to bypass authentication systems, inject arbitra...
CVE-2026-45304: YAML Parser Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")
More info at https://symfony.com/cve-2026-45304...
CVE-2026-45305: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex
More info at https://symfony.com/cve-2026-45305...