All errata/p7/ALT-PU-2014-1169-1
ALT-PU-2014-1169-1

Package update libyaml in branch p7

Version0.1.5-alt1
Task#113637
Published2014-02-06
Max severityMEDIUM
Severity:

Closed issues (2)

BDU:2015-04120
MEDIUM6.8

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Published: 2015-04-28Modified: 2024-07-05
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P
References
CVE-2013-6393
MEDIUM6.8

The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.

Published: 2014-02-06Modified: 2026-04-29
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P
References

Closed bugs (1)

Bug #29802

CVE-2013-6393 -- libyaml: heap-based buffer overflow when parsing YAML tags