495 matches found
CVE-2025-40908
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...
AZL-62242 CVE-2025-40908 affecting package perl-YAML-LibYAML for versions less than 0.902.0-2
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...
CVE-2025-40908 YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...
CVE-2025-40908 YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...
CVE-2025-40908 YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...
CVE-2025-40908
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...
CVE-2025-40908
The perl-YAML-LibYAML package (prior to version 0.903.0 ) is vulnerable to a file modification issue. The root cause is the use of 2-args open , which allows an attacker to modify existing files. This vulnerability affects several distributions, including Debian 11 , Unity Linux , SUSE SLED15/SLE...
CVE-2025-40908
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...
PT-2025-23428
Name of the Vulnerable Software and Affected Versions YAML-LibYAML versions prior to 0.903.0 Description YAML-LibYAML uses a two-argument open function when parsing YAML files, which allows an attacker to modify existing files on the system. This flaw allows a local attacker to provide a crafted...
CVE-2025-40908: Files or Directories Accessible to External Parties
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...
libyaml 安全漏洞
libyaml is a codec library for YAML from the YAML community. A security vulnerability exists in versions of libyaml prior to 0.903.0, which stems from the use of the parameter open that may result in modification of existing files...
Security Bulletin: IBM Watson Speech Services Cartridge v5.1.2 is vulnerable to a Base OS issue in LibYAML (CVE-2024-35325)
Summary IBM Watson Speech Services Cartridge v5.1.2 is vulnerable to a Base OS issue in LibYAML , caused by a double-free in the function yamleventdelete of the file /src/libyaml/src/api.c CVE-2024-35325. We have updated the base image used by our Speech Services and the following vulnerability h...
Linux Distros Unpatched Vulnerability : CVE-2024-35325
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in libyaml up to 0.2.5. Affected by this issue is the function yamleventdelete of the file /src/libyaml/src/api.c. The manipulation...
Linux Distros Unpatched Vulnerability : CVE-2024-35328
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libyaml v0.2.5 is vulnerable to a denial of service. Affected by this issue is the function yamlparserparse of the file /src/libyaml/src/parser.c. NOTE: this is...
OESA-2024-2277 libyaml security update
$summary. Security Fixes: Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possibl...
OESA-2024-2276 libyaml security update
$summary. Security Fixes: Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possibl...
EulerOS 2.0 SP8 : libyaml (EulerOS-SA-2024-2479)
According to the versions of the libyaml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function...
Huawei EulerOS: Security Advisory for libyaml (EulerOS-SA-2024-2479)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...