4 matches found
CVE-2022-3064
CVE-2022-3064 relates to go-yaml parsing that can cause CPU/memory resource abuse when handling malicious or large YAML documents. Connected data identifies affected packages and fixes: Podman<5.6.1-2, Buildah<1.41.4-2, and Packer
CVE-2021-4235
CVE-2021-4235 describes a denial-of-service risk from unbounded alias chasing in YAML parsing. In connected documents, two Mariner advisories link this CVE to the Go-YAML-based YAML processing used by container tools and specify practical fixes. The Mariner entries note that affected packages are...
CVE-2022-28948
CVE-2022-28948 affects Go-Yaml v3 Unmarshal; a crash can occur when deserializing invalid input. Connected sources corroborate a Go-Yaml Unmarshal issue across advisories (e.g., Astra Linux, Debian, GHSA), with no explicit patch version in the provided documents. Exploitation status is not stated...