Lucene search
+L

4928 matches found

osv-dsa
osv-dsa
•added 2014/12/13 12:00 a.m.•35 views

DSA-3102-1 libyaml - security update

Bulletin has no description...

5CVSS7.8AI score0.13195EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2014/12/13 12:00 a.m.•27 views

Debian Security Advisory DSA 3103-1 (libyaml-libyaml-perl - security update)

Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in LibYAML, a fast YAML 1.1 parser and emitter library. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. This update...

5CVSS9.4AI score0.13195EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2014/12/13 12:00 a.m.•21 views

Debian Security Advisory DSA 3102-1 (libyaml - security update)

Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in LibYAML, a fast YAML 1.1 parser and emitter library. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. OpenVAS...

5CVSS9.4AI score0.13195EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2014/12/12 12:00 a.m.•54 views

Debian: Security Advisory (DSA-3102-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.13195EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2014/12/11 2:59 a.m.•35 views

CVE-2014-8680

The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service assertion failure and named exit via vectors related to 1 the lack of GeoIP databases for both IPv4 and IPv6, or 2 IPv6 support with certain options...

5.4CVSS7.1AI score0.08987EPSS
SaveExploits0References2
Prion
Prion
•added 2014/12/11 2:59 a.m.•41 views

Code injection

The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service assertion failure and named exit via vectors related to 1 the lack of GeoIP databases for both IPv4 and IPv6, or 2 IPv6 support with certain options...

5.4CVSS7AI score0.08987EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2014/12/11 2:00 a.m.•82 views

CVE-2014-8680

The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service assertion failure and named exit via vectors related to 1 the lack of GeoIP databases for both IPv4 and IPv6, or 2 IPv6 support with certain options...

5.4CVSS7.3AI score0.08987EPSS
SaveExploits0
CVE
CVE
•added 2014/12/11 2:00 a.m.•93 views

CVE-2014-8680

Vulnerability context (CVE-2014-8680): Affects ISC BIND 9.10.0–9.10.1. The DoS stems from GeoIP functionality when GeoIP databases are missing for IPv4/IPv6 or when IPv6 options are used, causing an assertion failure and named exit. Public references in the connected docs corroborate this DoS ris...

5.4CVSS6.5AI score0.08987EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/12/11 12:00 a.m.•2 views

PT-2014-8680

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.10.0 through 9.10.1 Description The issue is related to the GeoIP functionality, which allows remote attackers to cause a denial of service. This can happen in two scenarios: 1 when there are no GeoIP databases available fo...

5.4CVSS0.08987EPSS
SaveExploits0References42
ThreatPost
ThreatPost
•added 2014/12/10 11:59 a.m.•11 views

Some Recursive DNS Implementations Patch DoS Vulnerability

UPDATE: Some domain name system DNS server implementations are at risk for denial-of-service attacks after a vulnerability was disclosed and patched in a few popular server packages, including BIND, OpenDNS, PowerDNS and NLnetLabs. According to an advisory from DHS and the CERT Coordination Cente...

0.9AI score
SaveExploits0References3
osv-debian
osv-debian
•added 2014/12/08 4:59 p.m.•21 views

DEBIAN-CVE-2014-9130

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

5CVSS6.7AI score0.13195EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2014/12/08 4:59 p.m.•18 views

CVE-2014-9130

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

7.2AI score
SaveExploits0References31
Prion
Prion
•added 2014/12/08 4:59 p.m.•21 views

Code injection

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

5CVSS6.7AI score0.13195EPSS
SaveExploits1References31Affected Software1
AlpineLinux
AlpineLinux
•added 2014/12/08 4:00 p.m.•66 views

CVE-2014-9130

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

5CVSS6.3AI score0.13195EPSS
SaveExploits1
Mend
Mend
•added 2014/12/08 4:00 p.m.•5 views

CVE-2014-9130

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

6.9CVSS0.13195EPSS
SaveExploits1References34
CVE
CVE
•added 2014/12/08 4:00 p.m.•170 views

CVE-2014-9130

CVE-2014-9130 affects LibYAML (used by YAML-LibYAML/YAML-XS in Perl) where wrapping of strings can trigger an assertion failure, causing a denial-of-service crash. Concrete details across connected docs identify LibYAML 0.1.5 and 0.1.6 as vulnerable; a patched version (0.1.7 or later) is availabl...

5CVSS6.3AI score0.13195EPSS
SaveExploits1References31Affected Software1
osv-ubuntu
osv-ubuntu
•added 2014/12/08 12:00 a.m.•17 views

UBUNTU-CVE-2014-9130

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

5CVSS7.3AI score0.13195EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2014/12/08 12:00 a.m.•35 views

CVE-2014-9130

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

5CVSS7.2AI score0.13195EPSS
SaveExploits1References5
osv-mgasa
osv-mgasa
•added 2014/12/05 3:54 p.m.•17 views

MGASA-2014-0508 Updated yaml & perl-YAML-LibYAML packages fix CVE-2014-9130

Updated yaml and perl-YAML-LibYAML packages fix security vulnerability: An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash CVE-2014-9130...

5CVSS7.5AI score0.13195EPSS
SaveExploits1References3
Mageia
Mageia
•added 2014/12/05 3:54 p.m.•48 views

Updated yaml & perl-YAML-LibYAML packages fix CVE-2014-9130

Updated yaml and perl-YAML-LibYAML packages fix security vulnerability: An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash CVE-2014-9130...

5CVSS6.5AI score0.13195EPSS
SaveExploits1References2
Rows per page
Query Builder