ALT-PU-2014-1507-1
Closed vulnerabilities
Published: 2014-05-23
BDU:2015-09768
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Severity: MEDIUM (6.8)
References:
Published: 2014-03-28
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2014-2525
Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.
Severity: MEDIUM (6.8)
References:
- http://advisories.mageia.org/MGASA-2014-0150.html
- http://advisories.mageia.org/MGASA-2014-0150.html
- openSUSE-SU-2014:0500
- openSUSE-SU-2014:0500
- openSUSE-SU-2015:0319
- openSUSE-SU-2015:0319
- openSUSE-SU-2016:1067
- openSUSE-SU-2016:1067
- RHSA-2014:0353
- RHSA-2014:0353
- RHSA-2014:0354
- RHSA-2014:0354
- RHSA-2014:0355
- RHSA-2014:0355
- 57836
- 57836
- 57966
- 57966
- 57968
- 57968
- http://support.apple.com/kb/HT6443
- http://support.apple.com/kb/HT6443
- DSA-2884
- DSA-2884
- DSA-2885
- DSA-2885
- http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/
- http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/
- http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
- http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
- http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/
- http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/
- MDVSA-2015:060
- MDVSA-2015:060
- http://www.ocert.org/advisories/ocert-2014-003.html
- http://www.ocert.org/advisories/ocert-2014-003.html
- 66478
- 66478
- USN-2160-1
- USN-2160-1
- https://bitbucket.org/xi/libyaml/commits/bce8b60f0b9af69fa9fab3093d0a41ba243de048
- https://bitbucket.org/xi/libyaml/commits/bce8b60f0b9af69fa9fab3093d0a41ba243de048
- https://puppet.com/security/cve/cve-2014-2525
- https://puppet.com/security/cve/cve-2014-2525