Lucene search
Veracode Vulnerability DatabaseVERACODE:38692HistoryDec 30, 2022 - 10:49 a.m.
Denial Of Service (DoS)
2022-12-3010:49:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
vulnerability
unbounded alias chasing
application crash
malicious input
github.com/go-yaml/yaml
EPSS
0.001
Percentile
40.8%
github.com/go-yaml/yaml is vulnerable to denial of service.The vulnerability exists in multiple functions of decode.go due to unbounded alias chasing which allows an attacker to cause an application crash via malicious input.
Related
gitlab
gitlab
Uncontrolled Resource Consumption
2022-12-27 00:00:00
YAML Go package vulnerable to denial of service
2022-12-28 00:00:00
debiancve
debiancve
CVE-2021-4235
2022-12-27 22:15:11
osv
osv
CVE-2021-4235
2022-12-27 22:15:11
YAML Go package vulnerable to denial of service
2022-12-28 00:30:23
Denial of service in gopkg.in/yaml.v2
2021-04-14 20:04:52
nvd
nvd
CVE-2021-4235
2022-12-27 22:15:11
cbl_mariner
cbl_mariner
CVE-2021-4235 affecting package etcd 3.5.1-6
2022-12-27 17:58:52
ubuntucve
ubuntucve
CVE-2021-4235
2022-12-27 00:00:00
wolfi
wolfi
CVE-2021-4235 vulnerabilities
2024-09-06 15:16:38
redhat
redhat
cvelist
cvelist
CVE-2021-4235 Denial of service in gopkg.in/yaml.v2
2022-12-27 21:13:42
github
github
YAML Go package vulnerable to denial of service
2022-12-28 00:30:23
cve
cve
CVE-2021-4235
2022-12-27 22:15:11
cgr
cgr
CVE-2021-4235 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2021-4235
2022-12-28 11:35:02
prion
prion
Denial of service
2022-12-27 22:15:00
nessus
nessus
Debian DLA-3479-1 : golang-yaml.v2 - LTS security update
2023-07-06 00:00:00
RHEL 8 / 9 : OpenShift Container Platform 4.12.0 (RHSA-2022:7398)
2024-04-28 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3479-1)
2023-07-06 00:00:00
Ubuntu: Security Advisory (USN-6287-1)
2023-08-14 00:00:00
ubuntu
ubuntu
Go yaml vulnerabilities
2023-08-14 00:00:00
debian
debian
[SECURITY] [DLA 3479-1] golang-yaml.v2 security update
2023-07-05 20:29:31
ibm
ibm
Security Bulletin: IBM Planning Analytics Connector for SAP is affected by security vulnerabilities
2024-04-02 18:29:22
Security Bulletin: IBM Storage Fusion and IBM Storage Fusion HCI may be vulnerable to denial of service and link following via Go-Yaml, kube-apiserver, Golang Go and Beego
2023-08-29 21:46:23
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-07-03 18:48:48