CVE-2022-38751 — DoS in SnakeYAML

Description

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.

Affected products

Vendor	Product	Affected	Fixed
snakeyaml	SnakeYAML	unspecified – < 1.31	1.31

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	snakeyaml	1.31-1	—
Debian 13	snakeyaml	1.31-1	—
Debian 12	snakeyaml	1.31-1	—
Debian 10	snakeyaml	1.23-1+deb10u1	DLA-3132-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 22.04 LTS	snakeyaml	1.29-1ubuntu0.22.04.1	USN-5944-1
Ubuntu 20.04 LTS	snakeyaml	1.25+ds-2ubuntu0.1	USN-5944-1
Ubuntu 18.04 LTS	snakeyaml	1.23-1+deb10u1build0.18.04.1	USN-5944-1

Show 2 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 16.04 LTS	snakeyaml	1.12-2ubuntu0.16.04.1~esm1	USN-5944-1
Ubuntu Pro 14.04 LTS	snakeyaml	1.12-2ubuntu0.14.04.1~esm1	USN-5944-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
Red Hat Satellite Capsule 6	ansible-collection-redhat-satellite	3.9.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansible-collection-redhat-satellite_operations	1.3.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansible-lint	5.0.8-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansible-runner +1	2.2.1-3.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansiblerole-foreman_scap_client	0.2.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansiblerole-insights-client	1.7.1-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	cjson	1.7.14-5.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	createrepo_c +3	0.20.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	dynflow-utils	1.6.3-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman +1	3.5.1.14-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-bootloaders-redhat +1	202102220000-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-discovery-image	1:4.1.0-10.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-discovery-image-service +1	1.0.0-4.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-installer +1	1:3.5.2.1-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-proxy +1	3.5.1-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	katello +3	4.7.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	katello-certs-tools	2.9.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	katello-client-bootstrap	1.7.9-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	libcomps +2	0.1.18-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	libdb-cxx	5.3.28-42.el8_4	RHSA-2023:2097
Red Hat Satellite Capsule 6	libsodium	1.0.17-3.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	libsolv +2	0.7.22-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	libwebsockets	2.4.2-2.el8	RHSA-2023:2097
Red Hat Satellite Capsule 6	mosquitto	2.0.14-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	pulpcore-selinux	1.3.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppet-agent	7.12.1-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppet-agent-oauth	0.5.10-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppet-foreman_scap_client	0.4.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppetlabs-stdlib	5.2.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppetserver	7.9.3-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiodns +1	3.0.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiofiles +1	22.1.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiohttp +1	3.8.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiohttp-xmlrpc +1	1.5.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aioredis +1	2.0.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiosignal +1	1.2.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ansible-builder +1	1.0.1-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-asgiref +1	3.5.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-async-lru +1	1.0.3-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-async-timeout +1	4.0.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-asyncio-throttle +1	1.0.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-attrs +1	21.4.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-backoff +1	2.1.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bindep +1	2.11.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bleach +1	3.3.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bleach-allowlist +1	1.0.3-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bracex +1	2.2.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-brotli +1	1.0.9-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-cchardet +1	2.1.7-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-certifi +1	2020.6.20-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-cffi +1	1.15.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-chardet +1	5.0.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-charset-normalizer +1	2.1.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-click +1	8.1.3-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-click-shell +1	2.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-colorama +1	0.4.4-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-commonmark +1	0.9.1-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-contextlib2 +1	21.6.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-cryptography +1	3.4.8-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-daemon +1	2.3.1-1.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-dataclasses +1	0.8-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-dateutil +1	2.8.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-debian +1	0.1.43-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-defusedxml +1	0.7.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-deprecated +1	1.2.13-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-diff-match-patch +1	20200713-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-distro +1	1.7.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django +1	3.2.18-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-currentuser +1	0.5.3-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-filter +1	22.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-guid +1	3.3.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-import-export +1	2.8.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-lifecycle +1	1.0.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-djangorestframework +1	3.13.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-djangorestframework-queryfields +1	1.0.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-docutils +1	0.19-1.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-drf-access-policy +1	1.1.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-drf-nested-routers +1	0.93.4-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-drf-spectacular +1	0.23.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-dynaconf +1	3.1.9-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ecdsa +1	0.14.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-enrich +1	1.2.6-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-et-xmlfile +1	1.1.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-flake8 +1	3.9.2-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-frozenlist +1	1.3.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-future +1	0.18.2-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-galaxy-importer +1	0.4.5-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gitdb +1	4.0.9-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gitpython +1	3.1.26-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gnupg +1	0.5.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gunicorn +1	20.1.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-idna +1	3.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-idna-ssl +1	1.1.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-importlib-metadata +1	4.10.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-inflection +3	0.5.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-iniparse +1	0.4-35.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-jinja2 +1	3.1.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-jsonschema +1	4.9.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-lockfile +1	0.12.2-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-lxml +1	4.7.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-markdown +1	3.3.6-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-markuppy +1	1.14-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-markupsafe +1	2.0.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-mccabe +1	0.6.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-multidict +1	6.0.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-naya +3	1.1.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-odfpy +1	1.4.1-6.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-openpyxl +1	3.0.9-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-packaging +1	21.3-1.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-parsley +1	1.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pbr +1	5.8.0-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pexpect +1	4.8.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-productmd +1	1.33-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-protobuf +1	4.21.6-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-psycopg2 +1	2.9.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ptyprocess +1	0.7.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-ansible +1	1:0.15.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-certguard +1	1.5.5-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-cli +1	0.14.0-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-container +1	2.14.3-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-deb +1	2.20.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-file +1	1.11.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-rpm +1	3.18.11-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulpcore +1	3.21.6-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyOpenSSL +1	19.1.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycairo +1	1.20.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycares +1	4.1.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycodestyle +1	2.7.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycparser +1	2.21-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycryptodomex +1	3.14.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyflakes +1	2.3.1-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pygments +1	2.11.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pygobject +1	1:3.40.1-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pygtrie +1	2.5.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyjwkest +1	1.4.2-6.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyjwt +1	2.5.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyparsing +1	2.4.7-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyrsistent +1	0.18.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pytz +1	2022.2.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyyaml +1	5.4.1-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-qpid +1	1.37.0-1.el8	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-redis +1	4.3.4-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-requests +1	2.28.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-requirements-parser +1	0.2.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-rhsm +1	1.19.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-rich +1	10.12.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ruamel-yaml +1	0.17.20-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ruamel-yaml-clib +1	0.2.6-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-schema +1	0.7.5-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-semantic-version +1	2.10.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-six +1	1.16.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-smmap +1	5.0.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-sqlparse +1	0.4.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-tablib +1	3.2.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-tenacity +1	7.0.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-toml +1	0.10.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-types-cryptography +1	3.3.23-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-typing-extensions +1	3.10.0.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-uritemplate +1	4.1.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-url-normalize +1	1.4.3-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-urllib3 +1	1.26.8-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-urlman +1	2.0.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-wcmatch +1	8.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-whitenoise +1	6.0.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-wrapt +1	1.14.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-xlrd +1	2.0.1-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-xlwt +1	1.3.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-yarl	1.7.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-zipp	3.4.0-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python2-qpid-qmf	1.39.0-7.el8amq	RHSA-2023:2097
Red Hat Satellite Capsule 6	python2-saslwrapper	0.22-6.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python3-qpid-proton	0.33.0-4.el8	RHSA-2023:2097
Red Hat Single Sign On 7	rh-sso7-keycloak +1	18.0.6-1.redhat_00001.1.el7sso	RHSA-2023:1045, RHSA-2023:1044, RHSA-2023:1043

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP4	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
SLES 15 SP3	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1

Show 3 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SUSE Manager Server Module 4.3	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
SUSE Manager Server Module 4.2	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
SUSE Manager Server Module 4.1	snakeyaml	1.31-150200.12.6.1	SUSE-SU-2022:3560-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Leap 15.4	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
openSUSE Leap 15.3	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2	snakeyaml +1	1.11-8.amzn2.0.2	ALAS2-2024-2403

Wolfi

Release	Package	Fixed in	Advisory
Wolfi rolling	management-api-for-apache-cassandra-5.0 +1	0.1.89-r0	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	org.yaml:snakeyaml	< 1.31	1.31	GHSA-98wm-3w3q-mw94

Advisories 19

RHSA-2023:2097 Red Hat Security Advisory: Satellite 6.13 Release Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1045 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9 Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1044 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8 Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1043 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7 Red Hat Security Advisories (RHSA) · Oct 13, 2026
WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
WID-SEC-2023-1142 Red Hat Integration Camel for Spring Boot: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
USN-5944-1 snakeyaml vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
WID-SEC-2023-1143 Red Hat Satellite: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 16, 2026
DLA-3132-1 snakeyaml - security update Debian Security (DSA / DLA) · Mar 9, 2026
SUSE-SU-2022:3397-1 Security update for snakeyaml SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3560-1 Security update for snakeyaml SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2023-3132 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 25, 2026
WID-SEC-2022-1635 Red Hat OpenShift und Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Apr 27, 2025
WID-SEC-2024-0543 IBM WebSphere Service Registry and Repository: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 6, 2024
WID-SEC-2024-0528 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 29, 2024
ALAS2-2024-2403 Moderate: snakeyaml security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jan 9, 2024
WID-SEC-2023-1755 IBM InfoSphere Information Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 16, 2023
WID-SEC-2022-2287 IBM MQ: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Jun 29, 2023
WID-SEC-2022-2286 IBM Business Automation Workflow: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Feb 27, 2023

CNA	v3.1	6.5
EUVD	v3.1	6.5
OSV:GHSA	v3.1	6.5

DoS in SnakeYAML

Description

Affected products

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

SUSE

openSUSE

Amazon Linux

Wolfi

Affected packages

Advisories 19

References