Lucene search
UbuntuUSN-2461-3HistoryJan 12, 2015 - 12:00 a.m.
PyYAML vulnerability
2015-01-1200:00:00
ubuntu.com
28
6.3 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.018 Low
EPSS
Percentile
88.1%
Releases
- Ubuntu 14.10
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- pyyaml - YAML parser and emitter for Python
Details
Stanisław Pitucha and Jonathan Gray discovered that PyYAML did not
properly handle wrapped strings. An attacker could create specially
crafted YAML data to trigger an assert, causing a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.10 | noarch | python-yaml | < 3.11-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | python-yaml-dbg | < 3.11-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | python3-yaml | < 3.11-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.10 | noarch | python3-yaml-dbg | < 3.11-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-yaml | < 3.10-4ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-yaml-dbg | < 3.10-4ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python3-yaml | < 3.10-4ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python3-yaml-dbg | < 3.10-4ubuntu0.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-yaml | < 3.10-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-yaml-dbg | < 3.10-2ubuntu0.1 | UNKNOWN |
References
Related
nessus
nessus
Fedora 21 : perl-YAML-LibYAML-0.54-1.fc21 (2014-16143)
2014-12-15 00:00:00
Scientific Linux Security Update : libyaml on SL6.x, SL7.x i386/x86_64 (20150128)
2015-01-29 00:00:00
RHEL 6 / 7 : libyaml (RHSA-2015:0100)
2015-01-29 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2015-482)
2015-09-08 00:00:00
CentOS Update for libyaml CESA-2015:0100 centos6
2015-01-29 00:00:00
Fedora Update for PyYAML FEDORA-2015-4477
2015-04-06 00:00:00
securityvulns
securityvulns
libYAML DoS
2014-12-22 00:00:00
[SECURITY] [DSA 3102-1] libyaml security update
2014-12-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2017-06-15 08:10:06
Denial Of Service (DoS)
2019-01-15 09:04:15
Denial Of Service (DoS)
2019-06-07 05:07:49
centos
centos
libyaml security update
2015-01-28 22:40:28
debian
debian
[SECURITY] [DSA 3115-1] pyyaml security update
2014-12-29 21:34:30
[SECURITY] [DSA 3103-1] libyaml-libyaml-perl security update
2014-12-13 16:33:57
[SECURITY] [DSA 3102-1] libyaml security update
2014-12-13 16:33:50
alpinelinux
alpinelinux
CVE-2014-9130
2014-12-08 16:59:00
oraclelinux
oraclelinux
libyaml security update
2015-01-28 00:00:00
redhat
redhat
(RHSA-2015:0100) Moderate: libyaml security update
2015-01-28 00:00:00
(RHSA-2015:0112) Moderate: libyaml security update
2015-02-02 00:00:00
(RHSA-2015:0260) Moderate: libyaml security update
2015-02-23 12:46:35
mageia
mageia
Updated yaml & perl-YAML-LibYAML packages fix CVE-2014-9130
2014-12-05 18:54:13
Updated python-yaml packages fix security vulnerability
2015-01-05 19:30:30
ubuntucve
ubuntucve
CVE-2014-9130
2014-12-08 00:00:00
ubuntu
ubuntu
LibYAML vulnerability
2015-01-12 00:00:00
libyaml-libyaml-perl vulnerability
2015-01-12 00:00:00
amazon
amazon
Medium: libyaml
2015-02-11 19:38:00
Medium: perl-YAML-LibYAML
2015-02-11 19:39:00
fedora
fedora
[SECURITY] Fedora 20 Update: PyYAML-3.10-11.fc20
2015-04-05 14:35:53
[SECURITY] Fedora 21 Update: PyYAML-3.11-7.fc21
2015-04-05 14:33:31
[SECURITY] Fedora 21 Update: libyaml-0.1.6-6.fc21
2014-12-13 09:37:28
prion
prion
Code injection
2014-12-08 16:59:00
osv
osv
libyaml - security update
2014-12-13 00:00:00
libyaml-libyaml-perl - security update
2014-12-14 00:00:00
cve
cve
CVE-2014-9130
2014-12-08 16:59:00
hackerone
hackerone
Ruby: Ruby 2.3.x and 2.2.x still bundle DoS vulnerable verision of libYAML
2017-06-02 14:29:02
debiancve
debiancve
CVE-2014-9130
2014-12-08 16:59:00
cloudfoundry
cloudfoundry
CVE-2014-9130: LibYAML vulnerability | Cloud Foundry
2016-09-21 00:00:00
6.3 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.018 Low
EPSS
Percentile
88.1%
Related for USN-2461-3