3 matches found
Astra Linux – Vulnerability in pyyaml
In PyYAML before version 5.1, the yaml.load API could execute arbitrary code if used with untrusted data. The load function has been deprecated in version 5.1, and the 'UnsafeLoader' has been introduced to maintain backward compatibility with this function...
9.8CVSS7.9AI score0.0561EPSS
SaveExploits1References2
UBUNTU-CVE-2018-20815
In QEMU 3.1.0, loaddevicetree in devicetree.c calls the deprecated loadimage function, which has a buffer overflow risk...
9.8CVSS7.2AI score0.04428EPSS
SaveExploits0References4
PYSEC-2018-49
In PyYAML before 5.1, the yaml.load API could execute arbitrary code if used with untrusted data. The load function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function...
9.8CVSS9.4AI score0.0561EPSS
SaveExploits1References10Affected Software1
20