Summary
Stanisław Pitucha and Jonathan Gray discovered that LibYAML did not
properly handle wrapped strings. An attacker could create specially
crafted YAML data to trigger an assert, causing a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libyaml | 0.1.4-3ubuntu3.1 |
Vulnerabilities 1
-
Unscored —CVE-2014-9130 EPSS 13%
scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-depende…
References
-
report
https://ubuntu.com/security/CVE-2014-9130