4638 matches found
Denial of service
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...
CVE-2021-4235
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...
CVE-2022-3064
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
UBUNTU-CVE-2022-3064
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
Design/Logic Flaw
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
UBUNTU-CVE-2021-4235
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...
CVE-2022-3064 Excessive resource consumption in gopkg.in/yaml.v2
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
CVE-2022-3064
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
CVE-2022-3064
CVE-2022-3064 relates to go-yaml parsing that can cause CPU/memory resource abuse when handling malicious or large YAML documents. Connected data identifies affected packages and fixes: Podman<5.6.1-2, Buildah<1.41.4-2, and Packer
CVE-2022-3064 Excessive resource consumption in gopkg.in/yaml.v2
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
CVE-2022-3064
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
CVE-2022-3064 Excessive resource consumption in gopkg.in/yaml.v2
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
CVE-2021-4235 Denial of service in gopkg.in/yaml.v2
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...
CVE-2021-4235
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...
CVE-2021-4235
CVE-2021-4235 describes a denial-of-service risk from unbounded alias chasing in YAML parsing. In connected documents, two Mariner advisories link this CVE to the Go-YAML-based YAML processing used by container tools and specify practical fixes. The Mariner entries note that affected packages are...
CVE-2021-4235 Denial of service in gopkg.in/yaml.v2
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...
Uncontrolled Resource Consumption
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...
Go-Yaml 资源管理错误漏洞
Go-Yaml is a Yaml support for the Go language. It enables Go programs to easily encode and decode Yaml values. A security vulnerability exists in Go-Yaml, which stems from the fact that parsing malicious or large YAML documents may consume too much CPU or memory...
Uncontrolled Resource Consumption
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
Go-Yaml 安全漏洞
Go-Yaml is a Yaml support for the Go language. It enables Go programs to easily encode and decode Yaml values. A security vulnerability exists in Go-Yaml that stems from unrestricted alias tracking, where a maliciously crafted YAML file may cause the system to consume large amounts of system...