170 matches found
ROS-20261001-73-0017
The vulnerability in perl-YAML-Syck is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261001-73-0014
The vulnerability in perl-YAML-Syck is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
ROS-20261001-73-0013
The vulnerability in perl-YAML-Syck is related to reading beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261001-73-0016
The vulnerability in perl-YAML-Syck is related to reading beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261001-73-0015
The vulnerability in perl-YAML-Syck is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
FreeBSD : p5-YAML-Syck -- Multiple vulnerabilities (501ff33c-b996-11f1-ad2b-40b034429ecf)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 501ff33c-b996-11f1-ad2b-40b034429ecf advisory. YAML-Syck project reports: YAML-Syck 1.47 fix the following issues: Tenable has extracted the...
MiracleLinux 8 : perl-YAML-Syck-1.30-7.el8_10 (AXSA:2026-1847:02)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1847:02 advisory. YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713 Tenable has extracted the preceding description block directly from the...
perl-YAML-Syck security update
An update is available for perl-YAML-Syck. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This module provides a Perl interface to the libsyck data serializatio...
RLSA-2026:67269 Important: perl-YAML-Syck security update
This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around. Security Fixes: YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713...
RockyLinux 8 : perl-YAML-Syck (RLSA-2026:67269)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67269 advisory. YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713 Tenable has extracted the preceding description block directly from the...
Astra Linux – Vulnerability in libyaml-syck-perl
Versions of YAML::Syck up to 1.36 for Perl have several potential security vulnerabilities, including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The Base64 decoder could read past the buffer end due t...
Astra Linux – Vulnerability in libyaml-syck-perl
Versions of YAML::Syck before 1.38 for Perl have a out-of-bounds read vulnerability. The base60 sexagesimal parsing code in perlsyck.h has a buffer underflow bug in both the intbase60 and floatbase60 handlers. When processing the leftmost segment of a colon-separated value e.g., the “1” in...
Important: Red Hat Security Advisory: perl-YAML-Syck security update
An update for perl-YAML-Syck is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document
A flaw was found in YAML::Syck. This vulnerability allows a remote attacker to cause a denial of service DoS by providing a specially crafted YAML document. The flaw occurs due to a use-after-free and double-free condition when an anchor node is redefined while still on the parser's value stack,...
perl-YAML-Syck security update
1.30-7 - Fix four libsyck memory-safety CVEs: CVE-2026-13713, CVE-2026-57075, CVE-2026-57076, CVE-2026-57077 - Resolves: RHEL-211926...
Important: perl-YAML-Syck security update
This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around. Security Fixes: YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713...
Oracle Linux 8 : ELSA-2026-67269-0: / perl-YAML-Syck (ELSA-2026-672690)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-672690 advisory. - Fix four libsyck memory-safety CVEs: CVE-2026-13713, CVE-2026-57075, CVE-2026-57076, CVE-2026-57077 Tenable has extracted the preceding description block...
RHEL 8 : perl-YAML-Syck (RHSA-2026:67269)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67269 advisory. This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data...
ALSA-2026:67269 Important: perl-YAML-Syck security update
This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around. Security Fixes: YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713...
AlmaLinux 8 : perl-YAML-Syck (ALSA-2026:67269)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:67269 advisory. YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713 Tenable has extracted the preceding description block directly from the AlmaLinu...