Skip to content
OpenAdvisories
Unscored DSA-2850-1 1 CVE

libyaml - heap-based buffer overflow

Published Jan 31, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 6.0 libyaml 0.1.3-1+deb6u2
Debian · 7 libyaml 0.1.4-2+deb7u2

Vulnerabilities 1

  • Critical —
    CVE-2013-6393

    Heap Based Buffer Overflow in libyaml

    The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, whic…

    libyaml-libyaml-perl libyaml libyaml Debian npm