Uncontrolled Resource Consumption in snakeyaml

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-25857 · ADVISORY
• snakeyaml/snakeyaml commit fc30078 · WEB
• bitbucket.org/snakeyaml/snakeyaml/commits/fc300780da21f4bb92c148bc90257201220cf174 · WEB
• bitbucket.org/snakeyaml/snakeyaml/issues/525 · WEB
• snakeyaml/snakeyaml · PACKAGE
• lists.debian.org/debian-lts-announce/2022/10/msg00001.html · WEB
• security.netapp.com/advisory/ntap-20240315-0010 · WEB
• security.snyk.io/vuln/SNYK-JAVA-ORGYAML-2806360 · WEB
• security.netapp.com/advisory/ntap-20240315-0010

Lỗ hổng khác của org.yaml:snakeyaml

• CVE-2022-1471NGHIÊM TRỌNG 9.8SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provide…
• CVE-2022-41854TRUNG BÌNH 6.5Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user s…
• CVE-2022-38752TRUNG BÌNH 6.5Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplie…
• CVE-2022-38751TRUNG BÌNH 6.5Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplie…
• CVE-2022-38750TRUNG BÌNH 5.5Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplie…