yaml package for Go can consume excessive amounts of CPU or memory

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

yaml package for Go can consume excessive amounts of CPU or memory

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

YAML Go package vulnerable to denial of service

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

AZL-44067 CVE-2022-3064 affecting package delve 1.5.0-16

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-44514 CVE-2022-3064 affecting package buildah for versions less than 1.41.4-2

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-44035 CVE-2022-3064 affecting package podman 4.1.1-26

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-44610 CVE-2022-3064 affecting package podman for versions less than 5.6.1-2

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

DEBIAN-CVE-2022-3064

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

CVE-2022-3064

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-43993 CVE-2022-3064 affecting package buildah 1.18.0-29

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-40841 CVE-2022-3064 affecting package packer for versions less than 1.9.5-1

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-43939 CVE-2022-3064 affecting package delve 1.5.0-20

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

AZL-44229 CVE-2021-4235 affecting package delve 1.5.0-16

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

DEBIAN-CVE-2021-4235

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

AZL-43642 CVE-2021-4235 affecting package podman 4.1.1-26

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

AZL-43918 CVE-2021-4235 affecting package buildah 1.18.0-29

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

AZL-45360 CVE-2021-4235 affecting package buildah for versions less than 1.41.4-2

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

AZL-45237 CVE-2021-4235 affecting package podman for versions less than 5.6.1-2

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

CVE-2021-4235

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

CVE-2021-4235

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...