Denial Of Service (DoS)

github.com/go-yaml/yaml is vulnerable to denial of service.The vulnerability exists in multiple functions of decode.go due to unbounded alias chasing which allows an attacker to cause an application crash via malicious input...

CVE-2021-4235

A flaw was found in go-yaml. This issue occurs due to unbounded alias chasing, where a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

YAML Go package vulnerable to denial of service

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

GHSA-R88R-GMRH-7J83 YAML Go package vulnerable to denial of service

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

GHSA-6Q6Q-88XP-6F2R yaml package for Go can consume excessive amounts of CPU or memory

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

yaml package for Go can consume excessive amounts of CPU or memory

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

yaml package for Go can consume excessive amounts of CPU or memory

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

YAML Go package vulnerable to denial of service

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

AZL-44067 CVE-2022-3064 affecting package delve 1.5.0-16

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-44514 CVE-2022-3064 affecting package buildah for versions less than 1.41.4-2

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-44035 CVE-2022-3064 affecting package podman 4.1.1-26

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-44610 CVE-2022-3064 affecting package podman for versions less than 5.6.1-2

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-43993 CVE-2022-3064 affecting package buildah 1.18.0-29

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

DEBIAN-CVE-2022-3064

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

CVE-2022-3064

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-40841 CVE-2022-3064 affecting package packer for versions less than 1.9.5-1

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-43939 CVE-2022-3064 affecting package delve 1.5.0-20

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

DEBIAN-CVE-2021-4235

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

AZL-43642 CVE-2021-4235 affecting package podman 4.1.1-26

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

AZL-44229 CVE-2021-4235 affecting package delve 1.5.0-16

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...