VDB
BDU%3A2023-05610
BDU%3A2023-05610
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Уязвимость библиотеки для сериализации и десериализации YAML-документов SnakeYAML, связанная с переполнением буфера на стеке, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
6.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Red Hat Inc., Apache Software Foundation, Gradle Inc. | Debian GNU/Linux, JBoss Enterprise Application Platform, Red Hat Single Sign-On, Red Hat Integration Camel K, Red Hat Integration Camel Quarkus, Red Hat Data Grid, OpenShift Developer Tools and Services, Red Hat Integration Camel for Spring Boot, Red Hat JBoss A-MQ Streams, Cassandra, SnakeYAML, OpenShift Dev Spaces, Gradle |
Timeline
- Sep 14, 2023 CVE Published
- Feb 10, 2026 CVE Updated
References
- https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081 url
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47081 url
- https://security.gentoo.org/glsa/202305-28 url
- https://vuldb.com/ru/?id.207870 url
- https://bitbucket.org/snakeyaml/snakeyaml/commits/5056a448f09c46250346c338e821386caa751182 url
- https://security-tracker.debian.org/tracker/CVE-2022-38752 url
- https://access.redhat.com/security/cve/CVE-2022-38752 advisory