5432 matches found
CVE-2014-2525
Heap-based buffer overflow in the yamlparserscanuriescapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file...
LibYAML 'yaml_parser_scan_uri_escapes（）'函数远程堆缓冲区溢出漏洞
BUGTRAQ ID: 66478 CVECAN ID: CVE-2014-2525 LibYAML是用C语言编写的YAML 1.1解析器和发射器。 由于程序没有正确过滤用户提供的输入，允许远程攻击者在易受攻击的应用程序上下文中执行任意代码。 0 LibYAML 0.1.6 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://pyyaml.org/wiki/LibYAML...
PT-2014-1902
Name of the Vulnerable Software and Affected Versions LibYAML versions prior to 0.1.6 Description The issue is related to a heap-based buffer overflow in the yaml parser scan uri escapes function. This allows attackers to execute arbitrary code via a long sequence of percent-encoded characters in...
[SECURITY] [DSA 2884-1] libyaml security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2884-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 26, 2014 http://www.debian.org/security/faq -...
CVE-2014-2525
Heap-based buffer overflow in the yamlparserscanuriescapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file...
Debian DSA-2885-1 : libyaml-libyaml-perl - security update
Ivan Fratric of the Google Security Team discovered a heap-based buffer overflow vulnerability in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a specially crafted YAML document that, when parsed by an application using libyaml, would cause the application t...
Debian Security Advisory DSA 2885-1 (libyaml-libyaml-perl - security update)
Ivan Fratric of the Google Security Team discovered a heap-based buffer overflow vulnerability in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a specially-crafted YAML document that, when parsed by an application using libyaml, would cause the application t...
CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs
Heap-based buffer overflow in the yamlparserscanuriescapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file...
LibYAML input sanitization errors
oCERT reports: The LibYAML project is an open source YAML 1.1 parser and emitter written in C. The library is affected by a heap-based buffer overflow which can lead to arbitrary code execution. The vulnerability is caused by lack of proper expansion for the string passed to the...
Debian DSA-2870-1 : libyaml-libyaml-perl - heap-based buffer overflow
Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially crafted tag that, when parsed by an application using libyaml, would cause the...
GLSA-201403-02 : LibYAML: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-201403-02 LibYAML: Arbitrary code execution A heap-based buffer overflow flaw was found in the way libyaml parsed YAML tags. Impact : A remote attacker could provide a specially crafted YAML document which when parsed by LibYAML,...
[SECURITY] [DSA 2870-1] libyaml-libyaml-perl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2870-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 08, 2014 http://www.debian.org/security/faq -...
DSA-2870-1 libyaml-libyaml-perl - heap-based buffer overflow
Bulletin has no description...
Debian Security Advisory DSA 2870-1 (libyaml-libyaml-perl - heap-based buffer overflow)
Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially-crafted tag that, when parsed by an application using libyaml, would cause the...
Mandriva Linux Security Advisory : yaml (MDVSA-2014:034)
A vulnerability has been discovered and corrected in yaml : The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAM...
USN-2098-2: LibYAML regression
USN-2098-1 fixed a vulnerability in LibYAML. The security fix used introduced a regression that caused parsing failures for certain valid YAML files. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Florian Weimer discovered that LibYAML incorrectly...
[SECURITY] [DSA 2850-2] libyaml regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-2850-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 12, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2850-2] libyaml regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-2850-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 12, 2014 http://www.debian.org/security/faq -...
MGASA-2014-0040 Updated yaml packages fix CVE-2013-6393
Updated libyaml packages fix security vulnerabilities: Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially-crafted tag that, when...
