PT-2025-23428

Name of the Vulnerable Software and Affected Versions YAML-LibYAML versions prior to 0.903.0 Description YAML-LibYAML uses a two-argument open function when parsing YAML files, which allows an attacker to modify existing files on the system. This flaw allows a local attacker to provide a crafted...

libyaml 安全漏洞

libyaml is a codec library for YAML from the YAML community. A security vulnerability exists in versions of libyaml prior to 0.903.0, which stems from the use of the parameter open that may result in modification of existing files...

Security Bulletin: IBM Watson Speech Services Cartridge v5.1.2 is vulnerable to a Base OS issue in LibYAML (CVE-2024-35325)

Summary IBM Watson Speech Services Cartridge v5.1.2 is vulnerable to a Base OS issue in LibYAML , caused by a double-free in the function yamleventdelete of the file /src/libyaml/src/api.c CVE-2024-35325. We have updated the base image used by our Speech Services and the following vulnerability h...

Linux Distros Unpatched Vulnerability : CVE-2024-35325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in libyaml up to 0.2.5. Affected by this issue is the function yamleventdelete of the file /src/libyaml/src/api.c. The manipulation...

Linux Distros Unpatched Vulnerability : CVE-2024-35328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libyaml v0.2.5 is vulnerable to a denial of service. Affected by this issue is the function yamlparserparse of the file /src/libyaml/src/parser.c. NOTE: this is...

OESA-2024-2277 libyaml security update

$summary. Security Fixes: Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possibl...

OESA-2024-2276 libyaml security update

$summary. Security Fixes: Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possibl...

EulerOS 2.0 SP8 : libyaml (EulerOS-SA-2024-2479)

According to the versions of the libyaml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function...

Huawei EulerOS: Security Advisory for libyaml (EulerOS-SA-2024-2479)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHSA-2015:0100 Red Hat Security Advisory: libyaml security update

Bulletin has no description...

RHSA-2015:0260 Red Hat Security Advisory: libyaml security update

Bulletin has no description...

RHSA-2015:0112 Red Hat Security Advisory: libyaml security update

Bulletin has no description...

RHSA-2014:0364 Red Hat Security Advisory: ruby193-libyaml security update

Bulletin has no description...

RHSA-2014:0353 Red Hat Security Advisory: libyaml security update

Bulletin has no description...

RHSA-2014:0354 Red Hat Security Advisory: libyaml security update

Bulletin has no description...

RHSA-2014:0355 Red Hat Security Advisory: ruby193-libyaml security update

Bulletin has no description...

RHSA-2014:0415 Red Hat Security Advisory: libyaml security update

Bulletin has no description...

Huawei EulerOS: Security Advisory for libyaml (EulerOS-SA-2024-2330)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libyaml (EulerOS-SA-2024-2310)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.12.0 : libyaml (EulerOS-SA-2024-2330)

According to the versions of the libyaml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function...