Lucene search
+L

23 matches found

Debian CVE
Debian CVE
added 2019/07/25 1:02 p.m.46 views

CVE-2019-1010182

yaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of service by impossible to catch abort. The component is: YamlLoader::loadfromstr function. The attack vector is: Parsing of a malicious YAML document. The fixed version is: 0.4.1 and later...

6.5CVSS6.4AI score0.01061EPSS
SaveExploits0
CVE
CVE
added 2019/07/25 1:02 p.m.54 views

CVE-2019-1010182

Yaml-rust 0.4.0 and earlier are affected by Uncontrolled Recursion in YamlLoader::load_from_str. The impact is a Denial of Service via an uncatchable abort, triggered by parsing a malicious YAML document. The fix is in 0.4.1 and later. This aligns across Red Hat, Debian, Ubuntu, OSV, and NVD entr...

6.5CVSS6.4AI score0.01061EPSS
SaveExploits0References1Affected Software1
vulnersOsv
vulnersOsv
added 2018/09/17 12:00 p.m.2 views

aa2 (>=0.9.0, <=0.9.1), abridge (>=1.0.0, <=1.1.6) +429 more potentially affected by CVE-2018-20993 via yaml-rust (>=0.2.2, <=0.3.5)

yaml-rust CARGO version =0.2.2, =0.9.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.0.0, =0.1.0, =1.0.0, =0.0.2, =0.0.1, =1.0.0, =1.3.4 - asuran-cli 0.1.1 and more Source cves: CVE-2018-20993 Source advisory: OSV:RUSTSEC-2018-0006...

7.5CVSS7.3AI score0.01411EPSS
SaveExploits0
Rows per page
Query Builder