Lucene search
RootSSV:61986HistoryMar 28, 2014 - 12:00 a.m.
LibYAML 'yaml_parser_scan_uri_escapes（）'函数远程堆缓冲区溢出漏洞
2014-03-2800:00:00
Root
www.seebug.org
33
0.826 High
EPSS
Percentile
98.1%
BUGTRAQ ID: 66478
CVE(CAN) ID: CVE-2014-2525
LibYAML是用C语言编写的YAML 1.1解析器和发射器。
由于程序没有正确过滤用户提供的输入，允许远程攻击者在易受攻击的应用程序上下文中执行任意代码。
0
LibYAML <0.1.6
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://pyyaml.org/wiki/LibYAML
Related
nessus
nessus
Ubuntu 12.04 LTS / 12.10 / 13.10 : libyaml vulnerability (USN-2160-1)
2014-04-04 00:00:00
Amazon Linux AMI : libyaml (ALAS-2014-321)
2014-04-23 00:00:00
openvas
openvas
Debian Security Advisory DSA 2884-1 (libyaml - security update)
2014-03-26 00:00:00
Slackware: Security Advisory (SSA:2014-111-01)
2022-04-21 00:00:00
Ubuntu: Security Advisory (USN-2160-1)
2014-04-08 00:00:00
debian
debian
[SECURITY] [DSA 2885-1] libyaml-libyaml-perl security update
2014-03-26 19:53:26
[SECURITY] [DSA 2884-1] libyaml security update
2014-03-26 19:52:18
[SECURITY] [DSA 2884-1] libyaml security update
2014-03-26 19:52:18
veracode
veracode
Arbitrary Code Execution
2017-02-02 06:05:46
debiancve
debiancve
CVE-2014-2525
2014-03-28 15:55:00
osv
osv
libyaml - security update
2014-03-26 00:00:00
libyaml-libyaml-perl - security update
2014-03-26 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2885-1] libyaml-libyaml-perl security update
2014-03-27 00:00:00
[oCERT-2014-003] LibYAML input sanitization errors
2014-03-31 00:00:00
[SECURITY] [DSA 2884-1] libyaml security update
2014-03-27 00:00:00
freebsd
freebsd
LibYAML input sanitization errors
2014-03-11 00:00:00
cve
cve
CVE-2014-2525
2014-03-28 15:55:00
prion
prion
Heap overflow
2014-03-28 15:55:00
ubuntu
ubuntu
LibYAML vulnerability
2014-04-03 00:00:00
libyaml-libyaml-perl vulnerabilities
2014-04-03 00:00:00
checkpoint_advisories
checkpoint_advisories
slackware
slackware
[slackware-security] libyaml
2014-04-21 21:12:43
gentoo
gentoo
LibYAML: Arbitrary code execution
2014-05-23 00:00:00
ubuntucve
ubuntucve
CVE-2014-2525
2014-03-27 00:00:00
mageia
mageia
Updated libyaml package fixes security vulnerability
2014-04-03 04:33:14
Updated perl-YAML-LibYAML package fixes security vulnerabilies
2014-04-03 05:02:12
amazon
amazon
Important: libyaml
2014-04-10 23:54:00
Important: perl-YAML-LibYAML
2014-04-17 14:18:00
rubygems
rubygems
CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs
2014-03-25 20:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: perl-YAML-LibYAML-0.41-4.fc19
2014-04-07 03:25:42
[SECURITY] Fedora 20 Update: perl-YAML-LibYAML-0.41-4.fc20
2014-04-07 03:24:16
[SECURITY] Fedora 19 Update: libyaml-0.1.6-1.fc19
2014-04-05 04:57:08
redhat
redhat
(RHSA-2014:0364) Important: ruby193-libyaml security update
2014-04-03 00:00:00
(RHSA-2014:0355) Important: ruby193-libyaml security update
2014-04-02 00:00:00
(RHSA-2014:0354) Important: libyaml security update
2014-04-02 00:00:00
centos
centos
ruby193 security update
2014-05-21 17:51:09