Summary
Stanisław Pitucha and Jonathan Gray discovered that
libyaml-libyaml-perl did not properly handle wrapped strings. An
attacker could create specially crafted YAML data to trigger an assert,
causing a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libyaml-libyaml-perl | 0.41-5ubuntu0.14.04.1 |
Vulnerabilities 1
-
Unscored —CVE-2014-9130 EPSS 13%
scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-depende…
References
-
report
https://ubuntu.com/security/CVE-2014-9130