USN-2461-3 — pyyaml vulnerability

Summary

Stanisław Pitucha and Jonathan Gray discovered that PyYAML did not
properly handle wrapped strings. An attacker could create specially
crafted YAML data to trigger an assert, causing a denial of service.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	pyyaml	3.10-4ubuntu0.1

Vulnerabilities 1

Unscored —

CVE-2014-9130 EPSS 13%

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-depende…

libyaml-libyaml-perl pyyaml pyyaml libyaml Debian Ubuntu Alpine

Dec 8, 2014

References

report
https://ubuntu.com/security/CVE-2014-9130

pyyaml vulnerability

Summary

Fixed packages 1

Vulnerabilities 1

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-depende…

References