CVE-2022-38752 — DoS in SnakeYAML

Description

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.

Affected products

Vendor	Product	Affected	Fixed
snakeyaml	SnakeYAML	unspecified – ≤ 1.31	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	snakeyaml	1.33-1	—
Debian 13	snakeyaml	1.33-1	—
Debian 12	snakeyaml	1.33-1	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
Red Hat Satellite Capsule 6	ansible-collection-redhat-satellite	3.9.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansible-collection-redhat-satellite_operations	1.3.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansible-lint	5.0.8-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansible-runner +1	2.2.1-3.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansiblerole-foreman_scap_client	0.2.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	ansiblerole-insights-client	1.7.1-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	cjson	1.7.14-5.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	createrepo_c +3	0.20.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	dynflow-utils	1.6.3-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman +1	3.5.1.14-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-bootloaders-redhat +1	202102220000-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-discovery-image	1:4.1.0-10.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-discovery-image-service +1	1.0.0-4.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-installer +1	1:3.5.2.1-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	foreman-proxy +1	3.5.1-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	katello +3	4.7.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	katello-certs-tools	2.9.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	katello-client-bootstrap	1.7.9-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	libcomps +2	0.1.18-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	libdb-cxx	5.3.28-42.el8_4	RHSA-2023:2097
Red Hat Satellite Capsule 6	libsodium	1.0.17-3.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	libsolv +2	0.7.22-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	libwebsockets	2.4.2-2.el8	RHSA-2023:2097
Red Hat Satellite Capsule 6	mosquitto	2.0.14-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	pulpcore-selinux	1.3.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppet-agent	7.12.1-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppet-agent-oauth	0.5.10-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppet-foreman_scap_client	0.4.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppetlabs-stdlib	5.2.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	puppetserver	7.9.3-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiodns +1	3.0.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiofiles +1	22.1.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiohttp +1	3.8.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiohttp-xmlrpc +1	1.5.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aioredis +1	2.0.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-aiosignal +1	1.2.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ansible-builder +1	1.0.1-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-asgiref +1	3.5.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-async-lru +1	1.0.3-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-async-timeout +1	4.0.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-asyncio-throttle +1	1.0.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-attrs +1	21.4.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-backoff +1	2.1.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bindep +1	2.11.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bleach +1	3.3.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bleach-allowlist +1	1.0.3-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-bracex +1	2.2.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-brotli +1	1.0.9-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-cchardet +1	2.1.7-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-certifi +1	2020.6.20-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-cffi +1	1.15.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-chardet +1	5.0.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-charset-normalizer +1	2.1.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-click +1	8.1.3-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-click-shell +1	2.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-colorama +1	0.4.4-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-commonmark +1	0.9.1-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-contextlib2 +1	21.6.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-cryptography +1	3.4.8-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-daemon +1	2.3.1-1.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-dataclasses +1	0.8-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-dateutil +1	2.8.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-debian +1	0.1.43-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-defusedxml +1	0.7.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-deprecated +1	1.2.13-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-diff-match-patch +1	20200713-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-distro +1	1.7.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django +1	3.2.18-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-currentuser +1	0.5.3-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-filter +1	22.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-guid +1	3.3.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-import-export +1	2.8.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-django-lifecycle +1	1.0.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-djangorestframework +1	3.13.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-djangorestframework-queryfields +1	1.0.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-docutils +1	0.19-1.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-drf-access-policy +1	1.1.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-drf-nested-routers +1	0.93.4-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-drf-spectacular +1	0.23.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-dynaconf +1	3.1.9-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ecdsa +1	0.14.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-enrich +1	1.2.6-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-et-xmlfile +1	1.1.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-flake8 +1	3.9.2-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-frozenlist +1	1.3.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-future +1	0.18.2-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-galaxy-importer +1	0.4.5-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gitdb +1	4.0.9-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gitpython +1	3.1.26-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gnupg +1	0.5.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-gunicorn +1	20.1.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-idna +1	3.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-idna-ssl +1	1.1.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-importlib-metadata +1	4.10.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-inflection +3	0.5.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-iniparse +1	0.4-35.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-jinja2 +1	3.1.2-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-jsonschema +1	4.9.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-lockfile +1	0.12.2-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-lxml +1	4.7.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-markdown +1	3.3.6-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-markuppy +1	1.14-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-markupsafe +1	2.0.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-mccabe +1	0.6.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-multidict +1	6.0.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-naya +3	1.1.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-odfpy +1	1.4.1-6.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-openpyxl +1	3.0.9-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-packaging +1	21.3-1.1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-parsley +1	1.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pbr +1	5.8.0-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pexpect +1	4.8.0-2.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-productmd +1	1.33-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-protobuf +1	4.21.6-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-psycopg2 +1	2.9.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ptyprocess +1	0.7.0-1.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-ansible +1	1:0.15.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-certguard +1	1.5.5-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-cli +1	0.14.0-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-container +1	2.14.3-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-deb +1	2.20.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-file +1	1.11.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulp-rpm +1	3.18.11-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pulpcore +1	3.21.6-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyOpenSSL +1	19.1.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycairo +1	1.20.1-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycares +1	4.1.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycodestyle +1	2.7.0-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycparser +1	2.21-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pycryptodomex +1	3.14.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyflakes +1	2.3.1-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pygments +1	2.11.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pygobject +1	1:3.40.1-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pygtrie +1	2.5.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyjwkest +1	1.4.2-6.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyjwt +1	2.5.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyparsing +1	2.4.7-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyrsistent +1	0.18.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pytz +1	2022.2.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-pyyaml +1	5.4.1-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-qpid +1	1.37.0-1.el8	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-redis +1	4.3.4-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-requests +1	2.28.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-requirements-parser +1	0.2.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-rhsm +1	1.19.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-rich +1	10.12.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ruamel-yaml +1	0.17.20-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-ruamel-yaml-clib +1	0.2.6-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-schema +1	0.7.5-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-semantic-version +1	2.10.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-six +1	1.16.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-smmap +1	5.0.0-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-sqlparse +1	0.4.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-tablib +1	3.2.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-tenacity +1	7.0.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-toml +1	0.10.2-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-types-cryptography +1	3.3.23-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-typing-extensions +1	3.10.0.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-uritemplate +1	4.1.1-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-url-normalize +1	1.4.3-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-urllib3 +1	1.26.8-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-urlman +1	2.0.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-wcmatch +1	8.3-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-whitenoise +1	6.0.0-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-wrapt +1	1.14.1-1.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-xlrd +1	2.0.1-5.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-xlwt +1	1.3.0-3.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-yarl	1.7.2-2.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python-zipp	3.4.0-4.el8pc	RHSA-2023:2097
Red Hat Satellite Capsule 6	python2-qpid-qmf	1.39.0-7.el8amq	RHSA-2023:2097
Red Hat Satellite Capsule 6	python2-saslwrapper	0.22-6.el8sat	RHSA-2023:2097
Red Hat Satellite Capsule 6	python3-qpid-proton	0.33.0-4.el8	RHSA-2023:2097
Red Hat Single Sign On 7	rh-sso7-keycloak +1	18.0.7-1.redhat_00001.1.el7sso	RHSA-2023:2707, RHSA-2023:2706, RHSA-2023:2705
Red Hat JBoss EAP 7	eap7-activemq-artemis-native	1:1.0.2-3.redhat_00004.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-apache-mime4j	0.8.9-1.redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-artemis-native +1	1:1.0.2-4.redhat_00004.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-artemis-wildfly-integration	1.0.7-1.redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-infinispan +9	11.0.17-1.Final_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-ironjacamar +8	1.5.11-1.Final_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-jboss-ejb-client	4.0.50-1.Final_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-jboss-el-api_3.0_spec	2.0.1-1.Final_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-jboss-metadata +5	13.4.0-1.Final_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-jboss-server-migration +2	1.10.0-26.Final_redhat_00025.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-jbossws-cxf	5.4.8-1.Final_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-jbossws-spi	3.4.0-2.Final_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-netty +28	4.1.86-1.Final_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-picketlink-api +7	2.5.5-22.SP12_redhat_00012.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-resteasy +18	3.15.5-1.Final_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-snakeyaml	1.33.0-2.SP1_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-undertow	2.2.23-1.SP2_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-undertow-jastow	2.0.14-1.Final_redhat_00001.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-wildfly +4	7.4.10-6.GA_redhat_00002.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-wildfly-http-client +4	1.1.16-1.Final_redhat_00002.1.el7eap	RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512
Red Hat JBoss EAP 7	eap7-wildfly-java-jdk17	7.4.10-6.GA_redhat_00002.1.el8eap	RHSA-2023:1514, RHSA-2023:1513

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP4	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
SLES 15 SP3	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1

Show 3 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SUSE Manager Server Module 4.3	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
SUSE Manager Server Module 4.2	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
SUSE Manager Server Module 4.1	snakeyaml	1.31-150200.12.6.1	SUSE-SU-2022:3560-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Leap 15.4	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1
openSUSE Leap 15.3	snakeyaml	1.31-150200.3.8.1	SUSE-SU-2022:3397-1

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2023	snakeyaml +1	1.27-6.amzn2023.0.3	ALAS2023-2023-375
Amazon Linux 2	snakeyaml +1	1.11-8.amzn2.0.3	ALAS2-2024-2450

Wolfi

Release	Package	Fixed in	Advisory
Wolfi rolling	management-api-for-apache-cassandra-5.0 +1	0.1.89-r0	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	org.yaml:snakeyaml	< 1.32	1.32	GHSA-9w3m-gqgf-c4p9

Advisories 28

RHSA-2023:2707 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.3 security update on RHEL 9 Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:2706 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.3 security update on RHEL 8 Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:2705 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.3 security update on RHEL 7 Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:2097 Red Hat Security Advisory: Satellite 6.13 Release Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1514 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 9 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1512 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
RHSA-2023:1513 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 8 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
WID-SEC-2023-1142 Red Hat Integration Camel for Spring Boot: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
WID-SEC-2023-1143 Red Hat Satellite: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 16, 2026
SUSE-SU-2022:3397-1 Security update for snakeyaml SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3560-1 Security update for snakeyaml SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2023-3132 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 25, 2026
WID-SEC-2023-0138 Oracle Communications Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 15, 2025
WID-SEC-2023-1193 Red Hat Single Sign On: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 10, 2025
WID-SEC-2022-1635 Red Hat OpenShift und Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Apr 27, 2025
WID-SEC-2023-0137 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 21, 2024
WID-SEC-2024-0543 IBM WebSphere Service Registry and Repository: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 6, 2024
WID-SEC-2024-0528 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 29, 2024
ALAS2-2024-2450 Low: snakeyaml security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Feb 1, 2024
ALAS2023-2023-375 Moderate: snakeyaml security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 3, 2023
WID-SEC-2023-1755 IBM InfoSphere Information Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 16, 2023
WID-SEC-2022-2287 IBM MQ: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Jun 29, 2023
WID-SEC-2023-1021 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 29, 2023
WID-SEC-2023-1017 Oracle Financial Services Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 18, 2023
WID-SEC-2022-2286 IBM Business Automation Workflow: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Feb 27, 2023
WID-SEC-2023-0214 HCL BigFix: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jan 29, 2023
WID-SEC-2023-0133 Oracle Financial Services Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 17, 2023

CNA	v3.1	6.5
EUVD	v3.1	6.5
OSV:GHSA	v3.1	6.5

DoS in SnakeYAML

Description

Affected products

Fixed in Linux distributions

Debian

Red Hat

SUSE

openSUSE

Amazon Linux

Wolfi

Affected packages

Advisories 28

References