Summary
It was discovered that SnakeYAML did not limit the maximal nested depth
for collections when parsing YAML data. If a user or automated system were
tricked into opening a specially crafted YAML file, an attacker could
possibly use this issue to cause applications using SnakeYAML to crash,
resulting in a denial of service. (CVE-2022-25857, CVE-2022-38749,
CVE-2022-38750)
It was discovered that SnakeYAML did not limit the maximal data matched
with regular expressions when parsing YAML data. If a user or automated
system were tricked into opening a specially crafted YAML file, an
attacker could possibly use this issue to cause applications using
SnakeYAML to crash, resulting in a denial of service. (CVE-2022-38751)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | snakeyaml | 1.23-1+deb10u1build0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | snakeyaml | 1.25+ds-2ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | snakeyaml | 1.29-1ubuntu0.22.04.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | snakeyaml | 1.12-2ubuntu0.14.04.1~esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | snakeyaml | 1.12-2ubuntu0.16.04.1~esm1 |
Vulnerabilities 4
-
High 7.5
Denial of Service (DoS)
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
-
Medium 6.5
DoS in SnakeYAML
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
-
Medium 6.5
DoS in SnakeYAML
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
-
Medium 6.5
DoS in SnakeYAML
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.