Lucene search
+L

142 matches found

NVD
NVD
added 2026/05/12 5:16 p.m.24 views

CVE-2026-5089

YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 sexagesimal parsing code in perlsyck.h has a buffer underflow bug in both intbase60 and floatbase60 handlers. When processing the leftmost segment of a colon-separated value e.g., the 1 in 1:30:45, the inner while loop...

7.3CVSS0.00333EPSS
SaveExploits0References5
OSV
OSV
added 2026/05/11 12:00 a.m.8 views

OPENSUSE-SU-2026:10746-1 perl-YAML-Syck-1.450.0-1.1 on GA media

These are all security issues fixed in the perl-YAML-Syck-1.450.0-1.1 package on the GA media of openSUSE Tumbleweed...

6.5CVSS5.8AI score0.00247EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:00 a.m.22 views

Alibaba Cloud Linux 3 : 0073: perl-YAML-Syck (ALINUX3-SA-2026:0073)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0073 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-4177: YAML::Syck versions through 1.36 for...

9.1CVSS6.1AI score0.00429EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/16 10:22 a.m.13 views

RHSA-2026:8311 Red Hat Security Advisory: perl-YAML-Syck security update

Bulletin has no description...

7.3CVSS5.7AI score0.00429EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/04/15 1:54 p.m.13 views

Important: Red Hat Security Advisory: perl-YAML-Syck security update

An update for perl-YAML-Syck is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.1CVSS6.1AI score0.00429EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/15 12:00 a.m.8 views

OPENSUSE-SU-2026:10551-1 perl-YAML-Syck-1.440.0-1.1 on GA media

These are all security issues fixed in the perl-YAML-Syck-1.440.0-1.1 package on the GA media of openSUSE Tumbleweed...

9.1CVSS5.8AI score0.00429EPSS
SaveExploits0References1
Rockylinux
Rockylinux
added 2026/04/09 6:02 a.m.13 views

perl-YAML-Syck security update

An update is available for perl-YAML-Syck. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This module provides a Perl interface to the libsyck data serializatio...

9.1CVSS6.2AI score0.00429EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/09 12:00 a.m.11 views

RockyLinux 8 : perl-YAML-Syck (RLSA-2026:6470)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:6470 advisory. perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAM...

9.1CVSS6.1AI score0.00429EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/06 12:00 a.m.9 views

MiracleLinux 8 : perl-YAML-Syck-1.30-6.el8_10 (AXSA:2026-405:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-405:01 advisory. perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the...

9.1CVSS6.2AI score0.00429EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/05 12:00 a.m.13 views

AlmaLinux 8 : perl-YAML-Syck (ALSA-2026:6470)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:6470 advisory. perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML...

9.1CVSS6.2AI score0.00429EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/05 12:00 a.m.10 views

Oracle Linux 8 : perl-YAML-Syck (ELSA-2026-6470)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-6470 advisory. 1.30-6 - Resolves: RHEL-156475 - Fix CVE-2026-4177 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

9.1CVSS6AI score0.00429EPSS
SaveExploits0References2
Oracle linux
Oracle linux
added 2026/04/03 12:00 a.m.19 views

perl-YAML-Syck security update

1.30-6 - Resolves: RHEL-156475 - Fix CVE-2026-4177...

9.1CVSS5.9AI score0.00429EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/03 12:00 a.m.18 views

RHEL 8 : perl-YAML-Syck (RHSA-2026:6470)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6470 advisory. This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data...

9.1CVSS6.2AI score0.00429EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/04/02 12:23 p.m.14 views

Important: Red Hat Security Advisory: perl-YAML-Syck security update

An update for perl-YAML-Syck is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

9.1CVSS6.1AI score0.00429EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/04/02 12:23 p.m.107 views

perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter

Multiple security issues have been discovered in the perl YAML::Syck module. A heap overflow occurs when class names exceed the initial 512-byte allocation, a base64 decoder could read past the buffer end on trailing newlines. strtok mutated n-typeid in place, corrupting shared node data, and a...

9.1CVSS6AI score0.00429EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/04/01 12:00 a.m.14 views

Amazon Linux 2 : perl-YAML-Syck, --advisory ALAS2-2026-3216 (ALAS-2026-3216)

The version of perl-YAML-Syck installed on the remote host is prior to 1.27-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3216 advisory. YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high- severity heap buff...

9.1CVSS6.2AI score0.00429EPSS
SaveExploits0References4
Amazon
Amazon
added 2026/04/01 12:00 a.m.16 views

Important: perl-YAML-Syck

Issue Overview: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the...

9.1CVSS6.1AI score0.00429EPSS
SaveExploits0
Amazon
Amazon
added 2026/04/01 12:00 a.m.29 views

Important: perl-YAML-Syck

Issue Overview: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the...

9.1CVSS6.1AI score0.00429EPSS
SaveExploits0
Fedora
Fedora
added 2026/03/31 12:27 a.m.15 views

[SECURITY] Fedora 44 Update: perl-YAML-Syck-1.39-1.fc44

This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around...

9.1CVSS5.9AI score0.00429EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2026/03/31 12:00 a.m.8 views

Fedora: Security Advisory (FEDORA-2026-d226775800)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS5.9AI score0.00429EPSS
SaveExploits0References3
Rows per page
Query Builder