5484 matches found
LibYAML input sanitization errors
oCERT reports: The LibYAML project is an open source YAML 1.1 parser and emitter written in C. The library is affected by a heap-based buffer overflow which can lead to arbitrary code execution. The vulnerability is caused by lack of proper expansion for the string passed to the...
Debian DSA-2870-1 : libyaml-libyaml-perl - heap-based buffer overflow
Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially crafted tag that, when parsed by an application using libyaml, would cause the...
GLSA-201403-02 : LibYAML: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-201403-02 LibYAML: Arbitrary code execution A heap-based buffer overflow flaw was found in the way libyaml parsed YAML tags. Impact : A remote attacker could provide a specially crafted YAML document which when parsed by LibYAML,...
[SECURITY] [DSA 2870-1] libyaml-libyaml-perl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2870-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 08, 2014 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2870-1 (libyaml-libyaml-perl - heap-based buffer overflow)
Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially-crafted tag that, when parsed by an application using libyaml, would cause the...
DSA-2870-1 libyaml-libyaml-perl - heap-based buffer overflow
Bulletin has no description...
Mandriva Linux Security Advisory : yaml (MDVSA-2014:034)
A vulnerability has been discovered and corrected in yaml : The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAM...
USN-2098-2: LibYAML regression
USN-2098-1 fixed a vulnerability in LibYAML. The security fix used introduced a regression that caused parsing failures for certain valid YAML files. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Florian Weimer discovered that LibYAML incorrectly...
[SECURITY] [DSA 2850-2] libyaml regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-2850-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 12, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2850-2] libyaml regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-2850-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 12, 2014 http://www.debian.org/security/faq -...
MGASA-2014-0040 Updated yaml packages fix CVE-2013-6393
Updated libyaml packages fix security vulnerabilities: Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially-crafted tag that, when...
[SECURITY] Fedora 20 Update: libyaml-0.1.4-6.fc20
YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C...
DEBIAN-CVE-2013-6393
The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...
CVE-2013-6393
The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...
CVE-2013-6393
The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...
CVE-2013-6393
The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...
PT-2014-1788
Name of the Vulnerable Software and Affected Versions LibYAML versions prior to 0.1.5 Description The issue is related to an incorrect cast in the yaml parser scan tag uri function, which can lead to a denial of service application crash and possibly allow remote attackers to execute arbitrary co...
FreeBSD : libyaml heap overflow resulting in possible code execution (111f1f84-1d14-4ff2-a9ea-cf07119c0d3b)
libyaml was prone to a heap overflow that could result in arbitrary code execution. Pkg uses libyaml to parse the package manifests in some cases. Pkg also used libyaml to parse the remote repository until 1.2. RedHat Product Security Team reports on libyaml : A heap-based buffer overflow flaw wa...
[SECURITY] [DSA 2850-1] libyaml security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2850-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 31, 2014 http://www.debian.org/security/faq -...