Skip to content
OpenAdvisories

Package · Debian

libyaml-perl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.3
    CVE-2019-25777

    YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution

    YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts t…

    libyaml-perl libyaml-perl Debian Ubuntu
  • Critical 9.1
    CVE-2017-20285

    YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes

    YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of …

    libyaml-perl libyaml-perl Debian Ubuntu