VDB
DEBIAN-CVE-2017-18342
DEBIAN-CVE-2017-18342
PUBLISHED
CVSS 9.800000190734863 CRITICAL
In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function.
Risk Scores
CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | pyyaml | 0, 0, 0 |
| Debian:13 | pyyaml | 0, 0, 0 |
| Debian:12 | pyyaml | 0, 0, 0 |
| Debian:14 | pyyaml | 0, 0, 0 |
Timeline
- Jun 27, 2018 CVE Published
- Apr 28, 2026 CVE Updated