CVE-2022-25857 — Denial of Service (DoS)

Description

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Affected products

Vendor	Product	Affected	Fixed
—	org.yaml:snakeyaml	< unspecified, unspecified – < 1.31	unspecified

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	snakeyaml	1.31-1	—
Debian 13	snakeyaml	1.31-1	—
Debian 12	snakeyaml	1.31-1	—
Debian 10	snakeyaml	1.23-1+deb10u1	DLA-3132-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 22.04 LTS	snakeyaml	1.29-1ubuntu0.22.04.1	USN-5944-1
Ubuntu 20.04 LTS	snakeyaml	1.25+ds-2ubuntu0.1	USN-5944-1
Ubuntu 18.04 LTS	snakeyaml	1.23-1+deb10u1build0.18.04.1	USN-5944-1

Show 2 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 16.04 LTS	snakeyaml	1.12-2ubuntu0.16.04.1~esm1	USN-5944-1
Ubuntu Pro 14.04 LTS	snakeyaml	1.12-2ubuntu0.14.04.1~esm1	USN-5944-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 8	prometheus-jmx-exporter +3	0.12.0-8.el8_6	RHSA-2022:6820

Show 6 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat Satellite Capsule 6	ansible-collection-redhat-satellite	3.9.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansible-collection-redhat-satellite_operations	1.3.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansible-lint	5.0.8-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansible-runner +1	2.2.1-3.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansiblerole-foreman_scap_client	0.2.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansiblerole-insights-client	1.7.1-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	cjson	1.7.14-5.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	createrepo_c +3	0.20.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	dynflow-utils	1.6.3-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman +1	3.5.1.14-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-bootloaders-redhat +1	202102220000-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-discovery-image	1:4.1.0-10.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-discovery-image-service +1	1.0.0-4.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-installer +1	1:3.5.2.1-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-proxy +1	3.5.1-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	katello +3	4.7.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	katello-certs-tools	2.9.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	katello-client-bootstrap	1.7.9-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	libcomps +2	0.1.18-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	libdb-cxx	5.3.28-42.el8_4	RHSA-2023:2097
Red Hat Satellite Capsule 6	libsodium	1.0.17-3.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	libsolv +2	0.7.22-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	libwebsockets	2.4.2-2.el8	RHSA-2023:2097
Red Hat Satellite Capsule 6	mosquitto	2.0.14-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	pulpcore-selinux	1.3.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppet-agent	7.12.1-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppet-agent-oauth	0.5.10-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppet-foreman_scap_client	0.4.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppetlabs-stdlib	5.2.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppetserver	7.9.3-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiodns +1	3.0.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiofiles +1	22.1.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiohttp +1	3.8.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiohttp-xmlrpc +1	1.5.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aioredis +1	2.0.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiosignal +1	1.2.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ansible-builder +1	1.0.1-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-asgiref +1	3.5.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-async-lru +1	1.0.3-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-async-timeout +1	4.0.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-asyncio-throttle +1	1.0.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-attrs +1	21.4.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-backoff +1	2.1.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bindep +1	2.11.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bleach +1	3.3.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bleach-allowlist +1	1.0.3-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bracex +1	2.2.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-brotli +1	1.0.9-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-cchardet +1	2.1.7-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-certifi +1	2020.6.20-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-cffi +1	1.15.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-chardet +1	5.0.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-charset-normalizer +1	2.1.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-click +1	8.1.3-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-click-shell +1	2.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-colorama +1	0.4.4-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-commonmark +1	0.9.1-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-contextlib2 +1	21.6.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-cryptography +1	3.4.8-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-daemon +1	2.3.1-1.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-dataclasses +1	0.8-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-dateutil +1	2.8.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-debian +1	0.1.43-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-defusedxml +1	0.7.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-deprecated +1	1.2.13-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-diff-match-patch +1	20200713-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-distro +1	1.7.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django +1	3.2.18-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-currentuser +1	0.5.3-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-filter +1	22.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-guid +1	3.3.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-import-export +1	2.8.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-lifecycle +1	1.0.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-djangorestframework +1	3.13.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-djangorestframework-queryfields +1	1.0.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-docutils +1	0.19-1.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-drf-access-policy +1	1.1.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-drf-nested-routers +1	0.93.4-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-drf-spectacular +1	0.23.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-dynaconf +1	3.1.9-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ecdsa +1	0.14.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-enrich +1	1.2.6-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-et-xmlfile +1	1.1.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-flake8 +1	3.9.2-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-frozenlist +1	1.3.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-future +1	0.18.2-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-galaxy-importer +1	0.4.5-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gitdb +1	4.0.9-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gitpython +1	3.1.26-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gnupg +1	0.5.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gunicorn +1	20.1.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-idna +1	3.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-idna-ssl +1	1.1.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-importlib-metadata +1	4.10.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-inflection +3	0.5.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-iniparse +1	0.4-35.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-jinja2 +1	3.1.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-jsonschema +1	4.9.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-lockfile +1	0.12.2-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-lxml +1	4.7.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-markdown +1	3.3.6-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-markuppy +1	1.14-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-markupsafe +1	2.0.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-mccabe +1	0.6.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-multidict +1	6.0.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-naya +3	1.1.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-odfpy +1	1.4.1-6.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-openpyxl +1	3.0.9-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-packaging +1	21.3-1.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-parsley +1	1.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pbr +1	5.8.0-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pexpect +1	4.8.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-productmd +1	1.33-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-protobuf +1	4.21.6-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-psycopg2 +1	2.9.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ptyprocess +1	0.7.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-ansible +1	1:0.15.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-certguard +1	1.5.5-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-cli +1	0.14.0-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-container +1	2.14.3-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-deb +1	2.20.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-file +1	1.11.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-rpm +1	3.18.11-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulpcore +1	3.21.6-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyOpenSSL +1	19.1.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycairo +1	1.20.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycares +1	4.1.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycodestyle +1	2.7.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycparser +1	2.21-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycryptodomex +1	3.14.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyflakes +1	2.3.1-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pygments +1	2.11.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pygobject +1	1:3.40.1-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pygtrie +1	2.5.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyjwkest +1	1.4.2-6.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyjwt +1	2.5.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyparsing +1	2.4.7-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyrsistent +1	0.18.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pytz +1	2022.2.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyyaml +1	5.4.1-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-qpid +1	1.37.0-1.el8	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-redis +1	4.3.4-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-requests +1	2.28.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-requirements-parser +1	0.2.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-rhsm +1	1.19.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-rich +1	10.12.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ruamel-yaml +1	0.17.20-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ruamel-yaml-clib +1	0.2.6-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-schema +1	0.7.5-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-semantic-version +1	2.10.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-six +1	1.16.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-smmap +1	5.0.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-sqlparse +1	0.4.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-tablib +1	3.2.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-tenacity +1	7.0.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-toml +1	0.10.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-types-cryptography +1	3.3.23-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-typing-extensions +1	3.10.0.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-uritemplate +1	4.1.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-url-normalize +1	1.4.3-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-urllib3 +1	1.26.8-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-urlman +1	2.0.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-wcmatch +1	8.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-whitenoise +1	6.0.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-wrapt +1	1.14.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-xlrd +1	2.0.1-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-xlwt +1	1.3.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-yarl	1.7.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-zipp	3.4.0-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python2-qpid-qmf	1.39.0-7.el8amq	RHSA-2023:2097
Red Hat Satellite Capsule 6	python2-saslwrapper	0.22-6.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python3-qpid-proton	0.33.0-4.el8	RHSA-2023:2097
Red Hat Single Sign On 7	rh-sso7-keycloak +1	18.0.6-1.redhat_00001.1.el7sso	RHSA-2023:1045, RHSA-2023:1044, RHSA-2023:1043
Red Hat OpenShift 4	jenkins	2.361.1.1675668150-1.el8	RHSA-2023:0777
Red Hat OpenShift 4	jenkins-2-plugins	4.9.1675668922-1.el8	RHSA-2023:0777, RHSA-2023:0560
Red Hat Ocp Tools 4	jenkins	2.387.1.1683009763-3.el8	RHSA-2024:0778, RHSA-2024:0777, RHSA-2024:0776
Red Hat Ocp Tools 4	jenkins-2-plugins	4.11.1683009941-1.el8	RHSA-2024:0778, RHSA-2024:0777, RHSA-2024:0776
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-activemq-artemis +15	1.5.5.016-1.redhat_00001.1.ep7.el7	RHSA-2025:4437, RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-activemq-artemis-tools	2.9.0-10.redhat_00021.1.el7eap	RHSA-2025:4437
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-artemis-native +1	1:1.5.5.016-1.redhat_00001.1.ep7.el7	RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-gson	2.8.9-1.redhat_00001.1.el7eap	RHSA-2025:4437
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-hal-console	3.2.18-1.Final_redhat_00001.1.el7eap	RHSA-2025:4437
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-jboss-server-migration +21	1.7.2-14.Final_redhat_00015.1.el7eap	RHSA-2025:4437
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-jboss-xnio-base	3.5.11-1.Final_redhat_00001.1.ep7.el7	RHSA-2025:4437, RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-jsoup	1.14.2-1.redhat_00002.1.ep7.el7	RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-undertow	1.4.18-14.SP13_redhat_00001.1.ep7.el7	RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-wildfly +1	7.1.10-2.GA_redhat_00002.1.ep7.el7	RHSA-2025:4437, RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-wildfly-javadocs +2	7.3.13-4.GA_redhat_00002.1.el7eap	RHSA-2025:4437
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-woodstox-core	5.0.3-2.redhat_00002.1.ep7.el7	RHSA-2025:4437, RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7	eap7-xml-security	2.0.10-2.redhat_00002.1.ep7.el7	RHSA-2025:4226
Red Hat JBoss EAP 7	eap7-snakeyaml	1.31.0-1.redhat_00001.1.el7eap	RHSA-2022:6823, RHSA-2022:6822, RHSA-2022:6821
Red Hat JBoss EAP 7	eap7-undertow	2.2.19-1.SP2_redhat_00001.1.el7eap	RHSA-2022:6823, RHSA-2022:6822, RHSA-2022:6821

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 8	prometheus-jmx-exporter +1	0.12.0-8.el8_6	ALSA-2022:6820

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 8	prometheus-jmx-exporter	0.12.0-8.el8	RLSA-2022:6820

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP4	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
SLES 15 SP3	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1

Show 3 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SUSE Manager Server Module 4.3	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
SUSE Manager Server Module 4.2	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
SUSE Manager Server Module 4.1	snakeyaml	1.31-150200.12.6.1	SUSE-SU-2022:3560-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Leap 15.4	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
openSUSE Leap 15.3	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2	snakeyaml +1	1.11-8.amzn2.0.1	ALAS2-2023-1976

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 8	prometheus-jmx-exporter +1	0.12.0-8.el8_6	ELSA-2022-6820

Wolfi

Release	Package	Fixed in	Advisory
Wolfi rolling	management-api-for-apache-cassandra-5.0 +1	0.1.89-r0	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	org.yaml:snakeyaml	< 1.31	1.31	GHSA-3mc7-4q67-w48m

Advisories 43

ALSA-2022:6820 Moderate: prometheus-jmx-exporter security update AlmaLinux Security Advisories · Oct 29, 2026
RHSA-2024:0777 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2023:7288 Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2023:6179 Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2023:6172 Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2025:4437 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.13 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
RHSA-2025:4226 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.10 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
RHSA-2024:0778 Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:2097 Red Hat Security Advisory: Satellite 6.13 Release Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1045 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9 Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1044 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8 Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:0777 Red Hat Security Advisory: OpenShift Container Platform 4.9.56 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1043 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7 Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:3198 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
RHSA-2023:0560 Red Hat Security Advisory: OpenShift Container Platform 4.10.51 security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
RHSA-2024:0776 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
RHSA-2022:6823 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
RHSA-2022:6821 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
RHSA-2022:6822 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
RHSA-2022:6820 Red Hat Security Advisory: prometheus-jmx-exporter security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
WID-SEC-2023-1142 Red Hat Integration Camel for Spring Boot: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
USN-5944-1 snakeyaml vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
WID-SEC-2023-1143 Red Hat Satellite: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 16, 2026
DLA-3132-1 snakeyaml - security update Debian Security (DSA / DLA) · Mar 9, 2026
RLSA-2022:6820 Moderate: prometheus-jmx-exporter security update Rocky Linux Security Advisories · Feb 4, 2026
SUSE-SU-2022:3397-1 Security update for snakeyaml SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3560-1 Security update for snakeyaml SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2023-3132 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 25, 2026
WID-SEC-2023-0086 Keycloak: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 25, 2026
WID-SEC-2022-2133 JFrog Artifactory: Mehrere Schwachstellen in Drittanbieter-Komponenten BSI CERT-Bund (WID) · Nov 18, 2025
WID-SEC-2023-0138 Oracle Communications Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 15, 2025
WID-SEC-2022-1636 Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Jun 24, 2025
WID-SEC-2022-1635 Red Hat OpenShift und Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Apr 27, 2025
WID-SEC-2023-0137 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 21, 2024
WID-SEC-2024-0543 IBM WebSphere Service Registry and Repository: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 6, 2024
WID-SEC-2023-1755 IBM InfoSphere Information Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 16, 2023
WID-SEC-2023-1034 Oracle JD Edwards: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 18, 2023
ALAS2-2023-1976 Important: snakeyaml security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Mar 7, 2023
WID-SEC-2022-2286 IBM Business Automation Workflow: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Feb 27, 2023
WID-SEC-2023-0289 IBM MQ: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Feb 5, 2023
WID-SEC-2023-0125 Oracle PeopleSoft: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 17, 2023
ELSA-2022-6820 Moderate: prometheus-jmx-exporter security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Oct 6, 2022

CNA	v3.1	7.5
EUVD	v3.1	7.5
OSV:GHSA	v3.1	7.5

Denial of Service (DoS)

Description

Affected products

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

AlmaLinux

Rocky Linux

SUSE

openSUSE

Amazon Linux

Oracle Linux

Wolfi

Affected packages

Advisories 43

References