Infinite Loop

2024-06-1706:56:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

libyaml

vulnerability

infinite loop

buffer states

yaml parser

denial-of-service (dos)

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

LibYAML is vulnerable to an Infinite loop. The vulnerability is due to improper handling of buffer states during YAML parsing. An attackers can exploit this by crafting a specific input to the YAML parser which potentially leads to a Denial-of-Service (DoS) condition.

CPENameOperatorVersion
libyamleq0.1.4
libyamleq0.1.4

CPE	Name	Operator	Version
	libyaml	eq	0.1.4
	libyaml	eq	0.1.4

References

github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35328.c