Important: libyaml

Issue Overview: The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buff...

Ubuntu Update for libyaml USN-2098-2

Check for the Version of libyaml OpenVAS Vulnerability Test $Id: gbubuntuUSN20982.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for libyaml USN-2098-2 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

Ubuntu: Security Advisory (USN-2098-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : yaml (MDVSA-2014:034)

A vulnerability has been discovered and corrected in yaml : The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAM...

Ubuntu 12.04 LTS / 12.10 / 13.10 : libyaml regression (USN-2098-2)

USN-2098-1 fixed a vulnerability in LibYAML. The security fix used introduced a regression that caused parsing failures for certain valid YAML files. This update fixes the problem. We apologize for the inconvenience. Florian Weimer discovered that LibYAML incorrectly handled certain large yaml...

USN-2098-2: LibYAML regression

USN-2098-1 fixed a vulnerability in LibYAML. The security fix used introduced a regression that caused parsing failures for certain valid YAML files. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Florian Weimer discovered that LibYAML incorrectly...

[SECURITY] [DSA 2850-2] libyaml regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2850-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 12, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2850-2] libyaml regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2850-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 12, 2014 http://www.debian.org/security/faq -...

Ubuntu: Security Advisory (USN-2098-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for libyaml USN-2098-1

Check for the Version of libyaml OpenVAS Vulnerability Test $Id: gbubuntuUSN20981.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for libyaml USN-2098-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

Fedora 20 : libyaml-0.1.4-6.fc20 (2014-1851)

Add patches for CVE-2013-6393 bz1033990 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 19 : libyaml-0.1.4-6.fc19 (2014-1817)

Add patches for CVE-2013-6393 bz1033990 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

[USN-2098-1] LibYAML vulnerability

========================================================================== Ubuntu Security Notice USN-2098-1 February 04, 2014 libyaml vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

MGASA-2014-0040 Updated yaml packages fix CVE-2013-6393

Updated libyaml packages fix security vulnerabilities: Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially-crafted tag that, when...

Updated yaml packages fix CVE-2013-6393

Updated libyaml packages fix security vulnerabilities: Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially-crafted tag that, when...

[SECURITY] Fedora 19 Update: libyaml-0.1.4-6.fc19

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C...

[SECURITY] Fedora 20 Update: libyaml-0.1.4-6.fc20

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C...

DEBIAN-CVE-2013-6393

The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...

CVE-2013-6393

The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...

CVE-2013-6393

The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...