Skip to content
OpenAdvisories
Unscored DSA-2870-1 1 CVE

libyaml-libyaml-perl - heap-based buffer overflow

Published Mar 8, 2014 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 6.0 libyaml-libyaml-perl 0.33-1+squeeze2
Debian · 7 libyaml-libyaml-perl 0.38-3+deb7u1

Vulnerabilities 1

  • Critical —

    Heap Based Buffer Overflow in libyaml

    The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, whic…