Code injection

The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

UBUNTU-CVE-2019-6285

The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

CVE-2019-6285

The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow. The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file. Remediation Upgrad...

DEBIAN-CVE-2019-6285

The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

CVE-2019-6285

The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

CVE-2019-6285

The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

CVE-2019-6285

The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

CVE-2019-6285

The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

PT-2019-18073

Name of the Vulnerable Software and Affected Versions yaml-cpp version 0.6.2 Description The issue allows remote attackers to cause a denial of service, resulting in stack consumption and application crash, via a crafted YAML file. This is due to a problem in the SingleDocParser::HandleFlowSequen...

CVE-2019-6285: Uncontrolled Recursion

The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

CVE-2018-20574

The SingleDocParser::HandleFlowMap function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

templated-yaml (>=1.0.1, <=1.1.1), wharf (>=1.0.0, <=2.0.1) potentially affected by CVE-2017-18342 via pyyaml (3.13.0rc1)

pyyaml PYPI version 3.13.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on pyyaml and may be impacted: - templated-yaml =1.0.1, =1.0.0, =2.0.1 Source cves: CVE-2017-18342 Source advisory: OSV:GHSA-RPRW-H62V-C2W7...

GHSA-2X54-J4M3-R6WX sqla-yaml-fixtures is vulnerable to Code Injection

Sqlayamlfixtures versions up to 0.9.1 allows local users to execute arbitrary python code via the fixturetext argument in sqlayamlfixtures.load...

Remote Code Execution (RCE)

sqlayamlfixtures is vulnerable to remote code execution RCE attacks. The vulnerability exists through the value of fixturetext which is supplied to yaml.load without sanitization, allowing RCE attacks...

PYSEC-2019-122

Sqlayamlfixtures 0.9.1 allows local users to execute arbitrary python code via the fixturetext argument in sqlayamlfixtures.load...

PYSEC-2019-122

Sqlayamlfixtures 0.9.1 allows local users to execute arbitrary python code via the fixturetext argument in sqlayamlfixtures.load...

PT-2019-20140

Name of the Vulnerable Software and Affected Versions Sqla yaml fixtures version 0.9.1 Description The issue allows local users to execute arbitrary python code via the fixture text argument in the sqla yaml fixtures.load function. Recommendations For Sqla yaml fixtures version 0.9.1, consider...

PT-2019-16623

Name of the Vulnerable Software and Affected Versions Sqla yaml fixtures versions up to 0.9.1 Description The issue allows local users to execute arbitrary python code via the fixture text argument in the sqla yaml fixtures.load function. This can lead to code execution with the privileges of the...

Fedora 29 : yaml-cpp (2018-27ec51c0dd)

Security fix for CVE-2017-5950. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...