VDB
BDU%3A2021-02625
BDU%3A2021-02625
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость синтаксического анализатора SnakeYAML, связанная с ошибками при обработке XML-сущностей, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Fedora Project, Сообщество свободного программного обеспечения, Red Hat Inc., Gradle Inc. | PeopleSoft Enterprise PeopleTools, Fedora, SnakeYAML, Quarkus, Gradle | |
| Oracle Corp., Fedora Project, Сообщество свободного программного обеспечения, Red Hat, Inc., Gradle Inc. | PeopleSoft Enterprise PeopleTools, Fedora, SnakeYAML, Quarkus, Gradle |
Timeline
- May 24, 2021 CVE Published
- Feb 10, 2026 CVE Updated
References
- https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billion advisory
- https://www.oracle.com/security-alerts/cpuapr2021.html advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CKN7VGIKTYBCAKYBRG55QHXAY5UDZ7HA/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTVJC54XGX26UJVVYCXZ7D25X3R5T2G6/ advisory