GLSA-201403-02 : LibYAML: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201403-02 LibYAML: Arbitrary code execution A heap-based buffer overflow flaw was found in the way libyaml parsed YAML tags. Impact : A remote attacker could provide a specially crafted YAML document which when parsed by LibYAML,...

[SECURITY] [DSA 2870-1] libyaml-libyaml-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2870-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 08, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2870-1 (libyaml-libyaml-perl - heap-based buffer overflow)

Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially-crafted tag that, when parsed by an application using libyaml, would cause the...

DSA-2870-1 libyaml-libyaml-perl - heap-based buffer overflow

Bulletin has no description...

Mandriva Linux Security Advisory : yaml (MDVSA-2014:034)

A vulnerability has been discovered and corrected in yaml : The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAM...

USN-2098-2: LibYAML regression

USN-2098-1 fixed a vulnerability in LibYAML. The security fix used introduced a regression that caused parsing failures for certain valid YAML files. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Florian Weimer discovered that LibYAML incorrectly...

[SECURITY] [DSA 2850-2] libyaml regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2850-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 12, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2850-2] libyaml regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2850-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 12, 2014 http://www.debian.org/security/faq -...

MGASA-2014-0040 Updated yaml packages fix CVE-2013-6393

Updated libyaml packages fix security vulnerabilities: Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially-crafted tag that, when...

[SECURITY] Fedora 20 Update: libyaml-0.1.4-6.fc20

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C...

DEBIAN-CVE-2013-6393

The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...

CVE-2013-6393

The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...

CVE-2013-6393

The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...

CVE-2013-6393

The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...

FreeBSD : libyaml heap overflow resulting in possible code execution (111f1f84-1d14-4ff2-a9ea-cf07119c0d3b)

libyaml was prone to a heap overflow that could result in arbitrary code execution. Pkg uses libyaml to parse the package manifests in some cases. Pkg also used libyaml to parse the remote repository until 1.2. RedHat Product Security Team reports on libyaml : A heap-based buffer overflow flaw wa...

[SECURITY] [DSA 2850-1] libyaml security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2850-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 31, 2014 http://www.debian.org/security/faq -...

DSA-2850-1 libyaml - heap-based buffer overflow

Bulletin has no description...

CVE-2013-6393

The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...

Nodejs js-yaml load() Code Execution (CVE-2013-4660)

A JavaScript Code Execution vulnerability has been reported in Nodejs...

Fedora Update for php-symfony2-Yaml FEDORA-2013-22422

Check for the Version of php-symfony2-Yaml OpenVAS Vulnerability Test Fedora Update for php-symfony2-Yaml FEDORA-2013-22422 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...