Skip to content
OpenAdvisories
Unscored RHSA-2014:0415 2 CVEs

Red Hat Security Advisory: libyaml security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Rhel Common 6 rhel_common:6::el6 libyaml 0:0.1.3-1.4.el6
Red Hat · Rhel Common 6 rhel_common:6::el6 libyaml-debuginfo 0:0.1.3-1.4.el6
Red Hat · Rhel Common 6 rhel_common:6::el6 libyaml-devel 0:0.1.3-1.4.el6

Vulnerabilities 2

  • Critical —
    CVE-2013-6393

    Heap Based Buffer Overflow in libyaml

    The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, whic…

    libyaml-libyaml-perl libyaml libyaml Debian npm
  • Unscored —
    CVE-2014-2525

    Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependen…

    libyaml-libyaml-perl libyaml Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1033990
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1078083
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0415.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-6393
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6393
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6393
  • report
    https://access.redhat.com/security/cve/CVE-2014-2525
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2525
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2525