cvelistv5 - cve-2013-6393

CVE-2013-6393 (GCVE-0-2013-6393)

Vulnerability from cvelistv5

Published

2014-02-06 22:00

Modified

2024-08-06 17:39

Severity ?

CWE

Summary

The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.

References

►

URL

	Vendor	Product	Version
	n/a	n/a	Version: n/a

ghsa-m75h-cghq-c8h5

Vulnerability from github

Published

2020-08-31 22:51

Modified

2021-09-23 20:56

Summary

Heap Based Buffer Overflow in libyaml

Details

Versions 0.2.2 and earlier depend on native libyaml version 0.1.5 or earlier. As such, they are affected by a heap-based buffer overflow vulnerability that may result in a crash or arbitrary code execution when parsing YAML tags.

Recommendation

Update to version 0.2.3 that includes a version of LibYAML that contains a fix for this issue.

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "libyaml"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2013-6393"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2020-08-31T18:08:07Z",
    "nvd_published_at": null,
    "severity": "CRITICAL"
  },
  "details": "Versions 0.2.2 and earlier depend on native libyaml version 0.1.5 or earlier. As such, they are affected by a heap-based buffer overflow vulnerability that may result in a crash or arbitrary code execution when parsing YAML tags.\n\n\n\n\n\n## Recommendation\n\n- Update to version 0.2.3 that includes a version of LibYAML that contains a fix for this issue.",
  "id": "GHSA-m75h-cghq-c8h5",
  "modified": "2021-09-23T20:56:01Z",
  "published": "2020-08-31T22:51:50Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6393"
    },
    {
      "type": "PACKAGE",
      "url": "https://bitbucket.org/xi/libyaml"
    },
    {
      "type": "WEB",
      "url": "https://bitbucket.org/xi/libyaml/commits/bce8b60f0b9af69fa9fab3093d0a41ba243de048"
    },
    {
      "type": "WEB",
      "url": "https://bitbucket.org/xi/libyaml/commits/tag/0.1.5"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/attachment.cgi?id=847926\u0026action=diff"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
    },
    {
      "type": "WEB",
      "url": "https://puppet.com/security/cve/cve-2013-6393"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT6536"
    },
    {
      "type": "WEB",
      "url": "https://web.archive.org/web/20140302205713/http://www.securityfocus.com/bid/65258"
    },
    {
      "type": "WEB",
      "url": "https://web.archive.org/web/20150523055002/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:060/?name=MDVSA-2015:060"
    },
    {
      "type": "WEB",
      "url": "https://www.npmjs.com/advisories/21"
    },
    {
      "type": "WEB",
      "url": "http://advisories.mageia.org/MGASA-2014-0040.html"
    },
    {
      "type": "WEB",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
    },
    {
      "type": "WEB",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html"
    },
    {
      "type": "WEB",
      "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-6393"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00065.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0353.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0354.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0355.html"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2014/dsa-2850"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2014/dsa-2870"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2098-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "Heap Based Buffer Overflow in libyaml"
}

rhsa-2014:0355

Vulnerability from csaf_redhat

Published

2014-04-02 19:50

Modified

2025-08-02 00:10

Summary

Red Hat Security Advisory: ruby193-libyaml security update

Notes

Topic

Updated ruby193-libyaml packages that fix two security issues are now available for Red Hat Software Collections 1. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. A buffer overflow flaw was found in the way the libyaml library parsed URLs in YAML documents. An attacker able to load specially crafted YAML input to an application using libyaml could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2014-2525) An integer overflow flaw was found in the way the libyaml library handled excessively long YAML tags. An attacker able to load specially crafted YAML input to application using libyaml could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2013-6393) Red Hat would like to thank oCERT for reporting the CVE-2014-2525 issue. oCERT acknowledges Ivan Fratric of the Google Security Team as the original reporter. The CVE-2013-6393 issue was discovered by Florian Weimer of the Red Hat Product Security Team. All ruby193-libyaml users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running applications linked against the libyaml library must be restarted for this update to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated ruby193-libyaml packages that fix two security issues are now\navailable for Red Hat Software Collections 1.\n\nThe Red Hat Security Response Team has rated this update as having\nImportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "YAML is a data serialization format designed for human readability and\ninteraction with scripting languages. LibYAML is a YAML parser and emitter\nwritten in C.\n\nA buffer overflow flaw was found in the way the libyaml library parsed URLs\nin YAML documents. An attacker able to load specially crafted YAML input to\nan application using libyaml could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe application. (CVE-2014-2525)\n\nAn integer overflow flaw was found in the way the libyaml library handled\nexcessively long YAML tags. An attacker able to load specially crafted YAML\ninput to application using libyaml could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe application. (CVE-2013-6393)\n\nRed Hat would like to thank oCERT for reporting the CVE-2014-2525 issue.\noCERT acknowledges Ivan Fratric of the Google Security Team as the original\nreporter. The CVE-2013-6393 issue was discovered by Florian Weimer of the\nRed Hat Product Security Team.\n\nAll ruby193-libyaml users are advised to upgrade to these updated packages,\nwhich contain backported patches to correct these issues. All running\napplications linked against the libyaml library must be restarted for this\nupdate to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2014:0355",
        "url": "https://access.redhat.com/errata/RHSA-2014:0355"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1033990",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
      },
      {
        "category": "external",
        "summary": "1078083",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1078083"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0355.json"
      }
    ],
    "title": "Red Hat Security Advisory: ruby193-libyaml security update",
    "tracking": {
      "current_release_date": "2025-08-02T00:10:31+00:00",
      "generator": {
        "date": "2025-08-02T00:10:31+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.6"
        }
      },
      "id": "RHSA-2014:0355",
      "initial_release_date": "2014-04-02T19:50:41+00:00",
      "revision_history": [
        {
          "date": "2014-04-02T19:50:41+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2014-04-02T19:50:41+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-08-02T00:10:31+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-RHSCL-1.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:1::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-RHSCL-1.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:1::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
                "product": {
                  "name": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
                  "product_id": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby193-libyaml-devel@0.1.4-5.1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
                "product": {
                  "name": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
                  "product_id": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby193-libyaml@0.1.4-5.1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
                "product": {
                  "name": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
                  "product_id": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby193-libyaml-debuginfo@0.1.4-5.1.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ruby193-libyaml-0:0.1.4-5.1.el6.src",
                "product": {
                  "name": "ruby193-libyaml-0:0.1.4-5.1.el6.src",
                  "product_id": "ruby193-libyaml-0:0.1.4-5.1.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby193-libyaml@0.1.4-5.1.el6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-0:0.1.4-5.1.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src"
        },
        "product_reference": "ruby193-libyaml-0:0.1.4-5.1.el6.src",
        "relates_to_product_reference": "6Server-RHSCL-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64"
        },
        "product_reference": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64"
        },
        "product_reference": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
        },
        "product_reference": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-0:0.1.4-5.1.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src"
        },
        "product_reference": "ruby193-libyaml-0:0.1.4-5.1.el6.src",
        "relates_to_product_reference": "6Workstation-RHSCL-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64"
        },
        "product_reference": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64"
        },
        "product_reference": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
        },
        "product_reference": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-1.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Florian Weimer"
          ],
          "organization": "Red Hat Product Security Team",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2013-6393",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2013-11-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1033990"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libyaml: heap-based buffer overflow when parsing YAML tags",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat security response team has rated this issue as having low security impact in Red Hat Enterpise MRG 1 and 2, CloudForms 3, and Red Hat Network Satellite 5. This issue is not currently planned to be addressed in future updates.Redhat satellite 6 does not ship libyaml\n\nThe Red Hat security response team has rated this issue as having low security impact in Red Hat Update Infrastructure. A future update may address this issue. \n\nThe Red Hat security response team has rated this issue as having moderate security impact in Subscription Asset Manager 1. A future update may address this issue.\n\nFor additional information, refer to the Issue Severity Classification:\nhttps://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
          "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
          "6Server-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
          "6Server-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
          "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
          "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
          "6Workstation-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
          "6Workstation-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "RHBZ#1033990",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-6393",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6393",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6393"
        }
      ],
      "release_date": "2014-01-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-02T19:50:41+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0355"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:A/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libyaml: heap-based buffer overflow when parsing YAML tags"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "oCERT"
          ]
        }
      ],
      "cve": "CVE-2014-2525",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2014-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1078083"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libyaml: heap-based buffer overflow when parsing URLs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Redhat satellite does not ship libyaml package but instead consumes the package from the RHEL distribution which is why it has been marked as not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
          "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
          "6Server-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
          "6Server-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
          "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
          "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
          "6Workstation-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
          "6Workstation-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "RHBZ#1078083",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1078083"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2525",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2525",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2525"
        }
      ],
      "release_date": "2014-03-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-02T19:50:41+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0355"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Workstation-RHSCL-1.0:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libyaml: heap-based buffer overflow when parsing URLs"
    }
  ]
}

rhsa-2014:0415

Vulnerability from csaf_redhat

Published

2014-04-17 12:01

Modified

2025-08-02 00:11

Summary

Red Hat Security Advisory: libyaml security update

Notes

Topic

Updated libyaml packages that fix two security issues are now available for Red Hat Common for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. A buffer overflow flaw was found in the way the libyaml library parsed URLs in YAML documents. An attacker able to load specially crafted YAML input to an application using libyaml could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2014-2525) An integer overflow flaw was found in the way the libyaml library handled excessively long YAML tags. An attacker able to load specially crafted YAML input to application using libyaml could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2013-6393) Red Hat would like to thank oCERT for reporting the CVE-2014-2525 issue. oCERT acknowledges Ivan Fratric of the Google Security Team as the original reporter. The CVE-2013-6393 issue was discovered by Florian Weimer of the Red Hat Product Security Team. Note: In their default configuration, applications distributed via the Red Hat Common channel do not use the libyaml library for parsing YAML, and are therefore not vulnerable to these issues. All libyaml users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running applications linked against the libyaml library must be restarted for this update to take effect.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated libyaml packages that fix two security issues are now available for\nRed Hat Common for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nImportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "YAML is a data serialization format designed for human readability and\ninteraction with scripting languages. LibYAML is a YAML parser and emitter\nwritten in C.\n\nA buffer overflow flaw was found in the way the libyaml library parsed URLs\nin YAML documents. An attacker able to load specially crafted YAML input to\nan application using libyaml could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe application. (CVE-2014-2525)\n\nAn integer overflow flaw was found in the way the libyaml library handled\nexcessively long YAML tags. An attacker able to load specially crafted YAML\ninput to application using libyaml could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe application. (CVE-2013-6393)\n\nRed Hat would like to thank oCERT for reporting the CVE-2014-2525 issue.\noCERT acknowledges Ivan Fratric of the Google Security Team as the original\nreporter. The CVE-2013-6393 issue was discovered by Florian Weimer of the\nRed Hat Product Security Team.\n\nNote: In their default configuration, applications distributed via the Red\nHat Common channel do not use the libyaml library for parsing YAML, and are\ntherefore not vulnerable to these issues.\n\nAll libyaml users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. All running\napplications linked against the libyaml library must be restarted for this\nupdate to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2014:0415",
        "url": "https://access.redhat.com/errata/RHSA-2014:0415"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1033990",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
      },
      {
        "category": "external",
        "summary": "1078083",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1078083"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0415.json"
      }
    ],
    "title": "Red Hat Security Advisory: libyaml security update",
    "tracking": {
      "current_release_date": "2025-08-02T00:11:07+00:00",
      "generator": {
        "date": "2025-08-02T00:11:07+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.6"
        }
      },
      "id": "RHSA-2014:0415",
      "initial_release_date": "2014-04-17T12:01:57+00:00",
      "revision_history": [
        {
          "date": "2014-04-17T12:01:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2014-04-17T12:01:57+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-08-02T00:11:07+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Common for RHEL Server (v. 6)",
                "product": {
                  "name": "Red Hat Common for RHEL Server (v. 6)",
                  "product_id": "6Server-RH-Common",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_common:6::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Common"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
                "product": {
                  "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
                  "product_id": "libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml-debuginfo@0.1.3-1.4.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-0:0.1.3-1.4.el6.i686",
                "product": {
                  "name": "libyaml-0:0.1.3-1.4.el6.i686",
                  "product_id": "libyaml-0:0.1.3-1.4.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml@0.1.3-1.4.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-devel-0:0.1.3-1.4.el6.i686",
                "product": {
                  "name": "libyaml-devel-0:0.1.3-1.4.el6.i686",
                  "product_id": "libyaml-devel-0:0.1.3-1.4.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml-devel@0.1.3-1.4.el6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
                "product": {
                  "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
                  "product_id": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml-debuginfo@0.1.3-1.4.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-0:0.1.3-1.4.el6.x86_64",
                "product": {
                  "name": "libyaml-0:0.1.3-1.4.el6.x86_64",
                  "product_id": "libyaml-0:0.1.3-1.4.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml@0.1.3-1.4.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
                "product": {
                  "name": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
                  "product_id": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml-devel@0.1.3-1.4.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libyaml-0:0.1.3-1.4.el6.src",
                "product": {
                  "name": "libyaml-0:0.1.3-1.4.el6.src",
                  "product_id": "libyaml-0:0.1.3-1.4.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml@0.1.3-1.4.el6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-0:0.1.3-1.4.el6.i686 as a component of Red Hat Common for RHEL Server (v. 6)",
          "product_id": "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.i686"
        },
        "product_reference": "libyaml-0:0.1.3-1.4.el6.i686",
        "relates_to_product_reference": "6Server-RH-Common"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-0:0.1.3-1.4.el6.src as a component of Red Hat Common for RHEL Server (v. 6)",
          "product_id": "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.src"
        },
        "product_reference": "libyaml-0:0.1.3-1.4.el6.src",
        "relates_to_product_reference": "6Server-RH-Common"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-0:0.1.3-1.4.el6.x86_64 as a component of Red Hat Common for RHEL Server (v. 6)",
          "product_id": "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.x86_64"
        },
        "product_reference": "libyaml-0:0.1.3-1.4.el6.x86_64",
        "relates_to_product_reference": "6Server-RH-Common"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.i686 as a component of Red Hat Common for RHEL Server (v. 6)",
          "product_id": "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.i686"
        },
        "product_reference": "libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
        "relates_to_product_reference": "6Server-RH-Common"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64 as a component of Red Hat Common for RHEL Server (v. 6)",
          "product_id": "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64"
        },
        "product_reference": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
        "relates_to_product_reference": "6Server-RH-Common"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-devel-0:0.1.3-1.4.el6.i686 as a component of Red Hat Common for RHEL Server (v. 6)",
          "product_id": "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.i686"
        },
        "product_reference": "libyaml-devel-0:0.1.3-1.4.el6.i686",
        "relates_to_product_reference": "6Server-RH-Common"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-devel-0:0.1.3-1.4.el6.x86_64 as a component of Red Hat Common for RHEL Server (v. 6)",
          "product_id": "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
        },
        "product_reference": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
        "relates_to_product_reference": "6Server-RH-Common"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Florian Weimer"
          ],
          "organization": "Red Hat Product Security Team",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2013-6393",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2013-11-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1033990"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libyaml: heap-based buffer overflow when parsing YAML tags",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat security response team has rated this issue as having low security impact in Red Hat Enterpise MRG 1 and 2, CloudForms 3, and Red Hat Network Satellite 5. This issue is not currently planned to be addressed in future updates.Redhat satellite 6 does not ship libyaml\n\nThe Red Hat security response team has rated this issue as having low security impact in Red Hat Update Infrastructure. A future update may address this issue. \n\nThe Red Hat security response team has rated this issue as having moderate security impact in Subscription Asset Manager 1. A future update may address this issue.\n\nFor additional information, refer to the Issue Severity Classification:\nhttps://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.i686",
          "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.src",
          "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.x86_64",
          "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
          "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
          "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.i686",
          "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "RHBZ#1033990",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-6393",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6393",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6393"
        }
      ],
      "release_date": "2014-01-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-17T12:01:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0415"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:A/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libyaml: heap-based buffer overflow when parsing YAML tags"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "oCERT"
          ]
        }
      ],
      "cve": "CVE-2014-2525",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2014-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1078083"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libyaml: heap-based buffer overflow when parsing URLs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Redhat satellite does not ship libyaml package but instead consumes the package from the RHEL distribution which is why it has been marked as not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.i686",
          "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.src",
          "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.x86_64",
          "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
          "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
          "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.i686",
          "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "RHBZ#1078083",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1078083"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2525",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2525",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2525"
        }
      ],
      "release_date": "2014-03-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-17T12:01:57+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0415"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RH-Common:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.i686",
            "6Server-RH-Common:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libyaml: heap-based buffer overflow when parsing URLs"
    }
  ]
}

rhsa-2014:0364

Vulnerability from csaf_redhat

Published

2014-04-03 20:18

Modified

2025-08-02 00:10

Summary

Red Hat Security Advisory: ruby193-libyaml security update

Notes

Topic

Updated ruby193-libyaml packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 3.0. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated ruby193-libyaml packages that fix two security issues are now\navailable for Red Hat Enterprise Linux OpenStack Platform 3.0.\n\nThe Red Hat Security Response Team has rated this update as having\nImportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "YAML is a data serialization format designed for human readability and\ninteraction with scripting languages. LibYAML is a YAML parser and emitter\nwritten in C.\n\nA buffer overflow flaw was found in the way the libyaml library parsed URLs\nin YAML documents. An attacker able to load specially crafted YAML input to\nan application using libyaml could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe application. (CVE-2014-2525)\n\nAn integer overflow flaw was found in the way the libyaml library handled\nexcessively long YAML tags. An attacker able to load specially crafted YAML\ninput to application using libyaml could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe application. (CVE-2013-6393)\n\nRed Hat would like to thank oCERT for reporting the CVE-2014-2525 issue.\noCERT acknowledges Ivan Fratric of the Google Security Team as the original\nreporter. The CVE-2013-6393 issue was discovered by Florian Weimer of the\nRed Hat Product Security Team.\n\nAll ruby193-libyaml users are advised to upgrade to these updated packages,\nwhich contain backported patches to correct these issues. All running\napplications linked against the libyaml library must be restarted for this\nupdate to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2014:0364",
        "url": "https://access.redhat.com/errata/RHSA-2014:0364"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1033990",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
      },
      {
        "category": "external",
        "summary": "1078083",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1078083"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0364.json"
      }
    ],
    "title": "Red Hat Security Advisory: ruby193-libyaml security update",
    "tracking": {
      "current_release_date": "2025-08-02T00:10:44+00:00",
      "generator": {
        "date": "2025-08-02T00:10:44+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.6"
        }
      },
      "id": "RHSA-2014:0364",
      "initial_release_date": "2014-04-03T20:18:42+00:00",
      "revision_history": [
        {
          "date": "2014-04-03T20:18:42+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2014-04-03T20:18:42+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-08-02T00:10:44+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux OpenStack Platform 3.0",
                "product": {
                  "name": "Red Hat Enterprise Linux OpenStack Platform 3.0",
                  "product_id": "6Server-Grizzly",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:3::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
                "product": {
                  "name": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
                  "product_id": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby193-libyaml-devel@0.1.4-5.1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
                "product": {
                  "name": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
                  "product_id": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby193-libyaml@0.1.4-5.1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
                "product": {
                  "name": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
                  "product_id": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby193-libyaml-debuginfo@0.1.4-5.1.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ruby193-libyaml-0:0.1.4-5.1.el6.src",
                "product": {
                  "name": "ruby193-libyaml-0:0.1.4-5.1.el6.src",
                  "product_id": "ruby193-libyaml-0:0.1.4-5.1.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ruby193-libyaml@0.1.4-5.1.el6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-0:0.1.4-5.1.el6.src as a component of Red Hat Enterprise Linux OpenStack Platform 3.0",
          "product_id": "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.src"
        },
        "product_reference": "ruby193-libyaml-0:0.1.4-5.1.el6.src",
        "relates_to_product_reference": "6Server-Grizzly"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0",
          "product_id": "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64"
        },
        "product_reference": "ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
        "relates_to_product_reference": "6Server-Grizzly"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0",
          "product_id": "6Server-Grizzly:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64"
        },
        "product_reference": "ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
        "relates_to_product_reference": "6Server-Grizzly"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0",
          "product_id": "6Server-Grizzly:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
        },
        "product_reference": "ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64",
        "relates_to_product_reference": "6Server-Grizzly"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Florian Weimer"
          ],
          "organization": "Red Hat Product Security Team",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2013-6393",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2013-11-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1033990"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libyaml: heap-based buffer overflow when parsing YAML tags",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat security response team has rated this issue as having low security impact in Red Hat Enterpise MRG 1 and 2, CloudForms 3, and Red Hat Network Satellite 5. This issue is not currently planned to be addressed in future updates.Redhat satellite 6 does not ship libyaml\n\nThe Red Hat security response team has rated this issue as having low security impact in Red Hat Update Infrastructure. A future update may address this issue. \n\nThe Red Hat security response team has rated this issue as having moderate security impact in Subscription Asset Manager 1. A future update may address this issue.\n\nFor additional information, refer to the Issue Severity Classification:\nhttps://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.src",
          "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
          "6Server-Grizzly:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
          "6Server-Grizzly:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "RHBZ#1033990",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-6393",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6393",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6393"
        }
      ],
      "release_date": "2014-01-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-03T20:18:42+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0364"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:A/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libyaml: heap-based buffer overflow when parsing YAML tags"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "oCERT"
          ]
        }
      ],
      "cve": "CVE-2014-2525",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2014-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1078083"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libyaml: heap-based buffer overflow when parsing URLs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Redhat satellite does not ship libyaml package but instead consumes the package from the RHEL distribution which is why it has been marked as not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.src",
          "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
          "6Server-Grizzly:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
          "6Server-Grizzly:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "RHBZ#1078083",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1078083"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2525",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2525",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2525"
        }
      ],
      "release_date": "2014-03-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-03T20:18:42+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0364"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.src",
            "6Server-Grizzly:ruby193-libyaml-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-debuginfo-0:0.1.4-5.1.el6.x86_64",
            "6Server-Grizzly:ruby193-libyaml-devel-0:0.1.4-5.1.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libyaml: heap-based buffer overflow when parsing URLs"
    }
  ]
}

rhsa-2014:0353

Vulnerability from csaf_redhat

Published

2014-04-02 19:50

Modified

2025-08-02 00:10

Summary

Red Hat Security Advisory: libyaml security update

Notes

Topic

Updated libyaml packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 3. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. A buffer overflow flaw was found in the way the libyaml library parsed URLs in YAML documents. An attacker able to load specially crafted YAML input to an application using libyaml could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2014-2525) An integer overflow flaw was found in the way the libyaml library handled excessively long YAML tags. An attacker able to load specially crafted YAML input to application using libyaml could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2013-6393) Red Hat would like to thank oCERT for reporting the CVE-2014-2525 issue. oCERT acknowledges Ivan Fratric of the Google Security Team as the original reporter. The CVE-2013-6393 issue was discovered by Florian Weimer of the Red Hat Product Security Team. All libyaml users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running applications linked against the libyaml library must be restarted for this update to take effect.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated libyaml packages that fix two security issues are now available for\nRed Hat Enterprise Linux OpenStack Platform 3.\n\nThe Red Hat Security Response Team has rated this update as having\nImportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "YAML is a data serialization format designed for human readability and\ninteraction with scripting languages. LibYAML is a YAML parser and emitter\nwritten in C.\n\nA buffer overflow flaw was found in the way the libyaml library parsed URLs\nin YAML documents. An attacker able to load specially crafted YAML input to\nan application using libyaml could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe application. (CVE-2014-2525)\n\nAn integer overflow flaw was found in the way the libyaml library handled\nexcessively long YAML tags. An attacker able to load specially crafted YAML\ninput to application using libyaml could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe application. (CVE-2013-6393)\n\nRed Hat would like to thank oCERT for reporting the CVE-2014-2525 issue.\noCERT acknowledges Ivan Fratric of the Google Security Team as the original\nreporter. The CVE-2013-6393 issue was discovered by Florian Weimer of the\nRed Hat Product Security Team.\n\nAll libyaml users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. All running\napplications linked against the libyaml library must be restarted for this\nupdate to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2014:0353",
        "url": "https://access.redhat.com/errata/RHSA-2014:0353"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1033990",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
      },
      {
        "category": "external",
        "summary": "1078083",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1078083"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0353.json"
      }
    ],
    "title": "Red Hat Security Advisory: libyaml security update",
    "tracking": {
      "current_release_date": "2025-08-02T00:10:39+00:00",
      "generator": {
        "date": "2025-08-02T00:10:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.6"
        }
      },
      "id": "RHSA-2014:0353",
      "initial_release_date": "2014-04-02T19:50:54+00:00",
      "revision_history": [
        {
          "date": "2014-04-02T19:50:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2014-04-02T19:50:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-08-02T00:10:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux OpenStack Platform 3.0",
                "product": {
                  "name": "Red Hat Enterprise Linux OpenStack Platform 3.0",
                  "product_id": "6Server-Grizzly",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:3::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libyaml-0:0.1.3-1.4.el6.src",
                "product": {
                  "name": "libyaml-0:0.1.3-1.4.el6.src",
                  "product_id": "libyaml-0:0.1.3-1.4.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml@0.1.3-1.4.el6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libyaml-0:0.1.3-1.4.el6.x86_64",
                "product": {
                  "name": "libyaml-0:0.1.3-1.4.el6.x86_64",
                  "product_id": "libyaml-0:0.1.3-1.4.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml@0.1.3-1.4.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
                "product": {
                  "name": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
                  "product_id": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml-devel@0.1.3-1.4.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
                "product": {
                  "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
                  "product_id": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml-debuginfo@0.1.3-1.4.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-0:0.1.3-1.4.el6.src as a component of Red Hat Enterprise Linux OpenStack Platform 3.0",
          "product_id": "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.src"
        },
        "product_reference": "libyaml-0:0.1.3-1.4.el6.src",
        "relates_to_product_reference": "6Server-Grizzly"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-0:0.1.3-1.4.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0",
          "product_id": "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.x86_64"
        },
        "product_reference": "libyaml-0:0.1.3-1.4.el6.x86_64",
        "relates_to_product_reference": "6Server-Grizzly"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0",
          "product_id": "6Server-Grizzly:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64"
        },
        "product_reference": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
        "relates_to_product_reference": "6Server-Grizzly"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-devel-0:0.1.3-1.4.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0",
          "product_id": "6Server-Grizzly:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
        },
        "product_reference": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
        "relates_to_product_reference": "6Server-Grizzly"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Florian Weimer"
          ],
          "organization": "Red Hat Product Security Team",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2013-6393",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2013-11-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1033990"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libyaml: heap-based buffer overflow when parsing YAML tags",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat security response team has rated this issue as having low security impact in Red Hat Enterpise MRG 1 and 2, CloudForms 3, and Red Hat Network Satellite 5. This issue is not currently planned to be addressed in future updates.Redhat satellite 6 does not ship libyaml\n\nThe Red Hat security response team has rated this issue as having low security impact in Red Hat Update Infrastructure. A future update may address this issue. \n\nThe Red Hat security response team has rated this issue as having moderate security impact in Subscription Asset Manager 1. A future update may address this issue.\n\nFor additional information, refer to the Issue Severity Classification:\nhttps://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.src",
          "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.x86_64",
          "6Server-Grizzly:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
          "6Server-Grizzly:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "RHBZ#1033990",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-6393",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6393",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6393"
        }
      ],
      "release_date": "2014-01-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-02T19:50:54+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0353"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:A/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libyaml: heap-based buffer overflow when parsing YAML tags"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "oCERT"
          ]
        }
      ],
      "cve": "CVE-2014-2525",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2014-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1078083"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libyaml: heap-based buffer overflow when parsing URLs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Redhat satellite does not ship libyaml package but instead consumes the package from the RHEL distribution which is why it has been marked as not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.src",
          "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.x86_64",
          "6Server-Grizzly:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
          "6Server-Grizzly:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "RHBZ#1078083",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1078083"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2525",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2525",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2525"
        }
      ],
      "release_date": "2014-03-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-02T19:50:54+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0353"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-Grizzly:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-Grizzly:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libyaml: heap-based buffer overflow when parsing URLs"
    }
  ]
}

rhsa-2014:0354

Vulnerability from csaf_redhat

Published

2014-04-02 19:50

Modified

2025-08-02 00:10

Summary

Red Hat Security Advisory: libyaml security update

Notes

Topic

Updated libyaml packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 4. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. A buffer overflow flaw was found in the way the libyaml library parsed URLs in YAML documents. An attacker able to load specially crafted YAML input to an application using libyaml could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2014-2525) An integer overflow flaw was found in the way the libyaml library handled excessively long YAML tags. An attacker able to load specially crafted YAML input to application using libyaml could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2013-6393) Red Hat would like to thank oCERT for reporting the CVE-2014-2525 issue. oCERT acknowledges Ivan Fratric of the Google Security Team as the original reporter. The CVE-2013-6393 issue was discovered by Florian Weimer of the Red Hat Product Security Team. All libyaml users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running applications linked against the libyaml library must be restarted for this update to take effect.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated libyaml packages that fix two security issues are now available for\nRed Hat Enterprise Linux OpenStack Platform 4.\n\nThe Red Hat Security Response Team has rated this update as having\nImportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "YAML is a data serialization format designed for human readability and\ninteraction with scripting languages. LibYAML is a YAML parser and emitter\nwritten in C.\n\nA buffer overflow flaw was found in the way the libyaml library parsed URLs\nin YAML documents. An attacker able to load specially crafted YAML input to\nan application using libyaml could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe application. (CVE-2014-2525)\n\nAn integer overflow flaw was found in the way the libyaml library handled\nexcessively long YAML tags. An attacker able to load specially crafted YAML\ninput to application using libyaml could cause the application to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe application. (CVE-2013-6393)\n\nRed Hat would like to thank oCERT for reporting the CVE-2014-2525 issue.\noCERT acknowledges Ivan Fratric of the Google Security Team as the original\nreporter. The CVE-2013-6393 issue was discovered by Florian Weimer of the\nRed Hat Product Security Team.\n\nAll libyaml users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. All running\napplications linked against the libyaml library must be restarted for this\nupdate to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2014:0354",
        "url": "https://access.redhat.com/errata/RHSA-2014:0354"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1033990",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
      },
      {
        "category": "external",
        "summary": "1078083",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1078083"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0354.json"
      }
    ],
    "title": "Red Hat Security Advisory: libyaml security update",
    "tracking": {
      "current_release_date": "2025-08-02T00:10:35+00:00",
      "generator": {
        "date": "2025-08-02T00:10:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.6"
        }
      },
      "id": "RHSA-2014:0354",
      "initial_release_date": "2014-04-02T19:50:48+00:00",
      "revision_history": [
        {
          "date": "2014-04-02T19:50:48+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2014-04-02T19:50:48+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-08-02T00:10:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux OpenStack Platform 4.0",
                "product": {
                  "name": "Red Hat Enterprise Linux OpenStack Platform 4.0",
                  "product_id": "6Server-RHOS-4.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:4::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libyaml-0:0.1.3-1.4.el6.src",
                "product": {
                  "name": "libyaml-0:0.1.3-1.4.el6.src",
                  "product_id": "libyaml-0:0.1.3-1.4.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml@0.1.3-1.4.el6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libyaml-0:0.1.3-1.4.el6.x86_64",
                "product": {
                  "name": "libyaml-0:0.1.3-1.4.el6.x86_64",
                  "product_id": "libyaml-0:0.1.3-1.4.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml@0.1.3-1.4.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
                "product": {
                  "name": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
                  "product_id": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml-devel@0.1.3-1.4.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
                "product": {
                  "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
                  "product_id": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libyaml-debuginfo@0.1.3-1.4.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-0:0.1.3-1.4.el6.src as a component of Red Hat Enterprise Linux OpenStack Platform 4.0",
          "product_id": "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.src"
        },
        "product_reference": "libyaml-0:0.1.3-1.4.el6.src",
        "relates_to_product_reference": "6Server-RHOS-4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-0:0.1.3-1.4.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 4.0",
          "product_id": "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.x86_64"
        },
        "product_reference": "libyaml-0:0.1.3-1.4.el6.x86_64",
        "relates_to_product_reference": "6Server-RHOS-4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 4.0",
          "product_id": "6Server-RHOS-4.0:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64"
        },
        "product_reference": "libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
        "relates_to_product_reference": "6Server-RHOS-4.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-devel-0:0.1.3-1.4.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 4.0",
          "product_id": "6Server-RHOS-4.0:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
        },
        "product_reference": "libyaml-devel-0:0.1.3-1.4.el6.x86_64",
        "relates_to_product_reference": "6Server-RHOS-4.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Florian Weimer"
          ],
          "organization": "Red Hat Product Security Team",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2013-6393",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2013-11-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1033990"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libyaml: heap-based buffer overflow when parsing YAML tags",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat security response team has rated this issue as having low security impact in Red Hat Enterpise MRG 1 and 2, CloudForms 3, and Red Hat Network Satellite 5. This issue is not currently planned to be addressed in future updates.Redhat satellite 6 does not ship libyaml\n\nThe Red Hat security response team has rated this issue as having low security impact in Red Hat Update Infrastructure. A future update may address this issue. \n\nThe Red Hat security response team has rated this issue as having moderate security impact in Subscription Asset Manager 1. A future update may address this issue.\n\nFor additional information, refer to the Issue Severity Classification:\nhttps://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.src",
          "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.x86_64",
          "6Server-RHOS-4.0:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
          "6Server-RHOS-4.0:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "RHBZ#1033990",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-6393",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6393",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6393"
        }
      ],
      "release_date": "2014-01-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-02T19:50:48+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0354"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:A/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libyaml: heap-based buffer overflow when parsing YAML tags"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "oCERT"
          ]
        }
      ],
      "cve": "CVE-2014-2525",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2014-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1078083"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libyaml: heap-based buffer overflow when parsing URLs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Redhat satellite does not ship libyaml package but instead consumes the package from the RHEL distribution which is why it has been marked as not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.src",
          "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.x86_64",
          "6Server-RHOS-4.0:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
          "6Server-RHOS-4.0:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "RHBZ#1078083",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1078083"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2525",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2525",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2525"
        }
      ],
      "release_date": "2014-03-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-04-02T19:50:48+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0354"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.src",
            "6Server-RHOS-4.0:libyaml-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-debuginfo-0:0.1.3-1.4.el6.x86_64",
            "6Server-RHOS-4.0:libyaml-devel-0:0.1.3-1.4.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libyaml: heap-based buffer overflow when parsing URLs"
    }
  ]
}

opensuse-su-2024:10029-1

Vulnerability from csaf_opensuse

Published

2024-06-15 00:00

Modified

2024-06-15 00:00

Summary

libyaml-0-2-0.1.6-4.8 on GA media

Notes

Title of the patch

libyaml-0-2-0.1.6-4.8 on GA media

Description of the patch

These are all security issues fixed in the libyaml-0-2-0.1.6-4.8 package on the GA media of openSUSE Tumbleweed.

Patchnames

openSUSE-Tumbleweed-2024-10029

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "libyaml-0-2-0.1.6-4.8 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the libyaml-0-2-0.1.6-4.8 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10029",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10029-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-6393 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-6393/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-2525 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-2525/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9130 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9130/"
      }
    ],
    "title": "libyaml-0-2-0.1.6-4.8 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10029-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libyaml-0-2-0.1.6-4.8.aarch64",
                "product": {
                  "name": "libyaml-0-2-0.1.6-4.8.aarch64",
                  "product_id": "libyaml-0-2-0.1.6-4.8.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-devel-0.1.6-4.8.aarch64",
                "product": {
                  "name": "libyaml-devel-0.1.6-4.8.aarch64",
                  "product_id": "libyaml-devel-0.1.6-4.8.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libyaml-0-2-0.1.6-4.8.ppc64le",
                "product": {
                  "name": "libyaml-0-2-0.1.6-4.8.ppc64le",
                  "product_id": "libyaml-0-2-0.1.6-4.8.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-devel-0.1.6-4.8.ppc64le",
                "product": {
                  "name": "libyaml-devel-0.1.6-4.8.ppc64le",
                  "product_id": "libyaml-devel-0.1.6-4.8.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libyaml-0-2-0.1.6-4.8.s390x",
                "product": {
                  "name": "libyaml-0-2-0.1.6-4.8.s390x",
                  "product_id": "libyaml-0-2-0.1.6-4.8.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-devel-0.1.6-4.8.s390x",
                "product": {
                  "name": "libyaml-devel-0.1.6-4.8.s390x",
                  "product_id": "libyaml-devel-0.1.6-4.8.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libyaml-0-2-0.1.6-4.8.x86_64",
                "product": {
                  "name": "libyaml-0-2-0.1.6-4.8.x86_64",
                  "product_id": "libyaml-0-2-0.1.6-4.8.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libyaml-devel-0.1.6-4.8.x86_64",
                "product": {
                  "name": "libyaml-devel-0.1.6-4.8.x86_64",
                  "product_id": "libyaml-devel-0.1.6-4.8.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-0-2-0.1.6-4.8.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.aarch64"
        },
        "product_reference": "libyaml-0-2-0.1.6-4.8.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-0-2-0.1.6-4.8.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.ppc64le"
        },
        "product_reference": "libyaml-0-2-0.1.6-4.8.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-0-2-0.1.6-4.8.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.s390x"
        },
        "product_reference": "libyaml-0-2-0.1.6-4.8.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-0-2-0.1.6-4.8.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.x86_64"
        },
        "product_reference": "libyaml-0-2-0.1.6-4.8.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-devel-0.1.6-4.8.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.aarch64"
        },
        "product_reference": "libyaml-devel-0.1.6-4.8.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-devel-0.1.6-4.8.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.ppc64le"
        },
        "product_reference": "libyaml-devel-0.1.6-4.8.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-devel-0.1.6-4.8.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.s390x"
        },
        "product_reference": "libyaml-devel-0.1.6-4.8.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libyaml-devel-0.1.6-4.8.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.x86_64"
        },
        "product_reference": "libyaml-devel-0.1.6-4.8.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-6393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-6393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.aarch64",
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.ppc64le",
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.s390x",
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.x86_64",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.aarch64",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.ppc64le",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.s390x",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-6393",
          "url": "https://www.suse.com/security/cve/CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 860617 for CVE-2013-6393",
          "url": "https://bugzilla.suse.com/860617"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2013-6393",
          "url": "https://bugzilla.suse.com/911782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.aarch64",
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.ppc64le",
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.s390x",
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.x86_64",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.aarch64",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.ppc64le",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.s390x",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-6393"
    },
    {
      "cve": "CVE-2014-2525",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-2525"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.aarch64",
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.ppc64le",
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.s390x",
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.x86_64",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.aarch64",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.ppc64le",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.s390x",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-2525",
          "url": "https://www.suse.com/security/cve/CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 868944 for CVE-2014-2525",
          "url": "https://bugzilla.suse.com/868944"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2014-2525",
          "url": "https://bugzilla.suse.com/911782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.aarch64",
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.ppc64le",
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.s390x",
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.x86_64",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.aarch64",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.ppc64le",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.s390x",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-2525"
    },
    {
      "cve": "CVE-2014-9130",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9130"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.aarch64",
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.ppc64le",
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.s390x",
          "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.x86_64",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.aarch64",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.ppc64le",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.s390x",
          "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9130",
          "url": "https://www.suse.com/security/cve/CVE-2014-9130"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 907809 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/907809"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/911782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921588 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/921588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.aarch64",
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.ppc64le",
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.s390x",
            "openSUSE Tumbleweed:libyaml-0-2-0.1.6-4.8.x86_64",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.aarch64",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.ppc64le",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.s390x",
            "openSUSE Tumbleweed:libyaml-devel-0.1.6-4.8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-9130"
    }
  ]
}

opensuse-su-2024:10520-1

Vulnerability from csaf_opensuse

Published

2024-06-15 00:00

Modified

2024-06-15 00:00

Summary

perl-YAML-LibYAML-0.59-2.11 on GA media

Notes

Title of the patch

perl-YAML-LibYAML-0.59-2.11 on GA media

Description of the patch

These are all security issues fixed in the perl-YAML-LibYAML-0.59-2.11 package on the GA media of openSUSE Tumbleweed.

Patchnames

openSUSE-Tumbleweed-2024-10520

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "perl-YAML-LibYAML-0.59-2.11 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the perl-YAML-LibYAML-0.59-2.11 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10520",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10520-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2012-1152 page",
        "url": "https://www.suse.com/security/cve/CVE-2012-1152/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-6393 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-6393/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-2525 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-2525/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9130 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9130/"
      }
    ],
    "title": "perl-YAML-LibYAML-0.59-2.11 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10520-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-LibYAML-0.59-2.11.aarch64",
                "product": {
                  "name": "perl-YAML-LibYAML-0.59-2.11.aarch64",
                  "product_id": "perl-YAML-LibYAML-0.59-2.11.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-LibYAML-0.59-2.11.ppc64le",
                "product": {
                  "name": "perl-YAML-LibYAML-0.59-2.11.ppc64le",
                  "product_id": "perl-YAML-LibYAML-0.59-2.11.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-LibYAML-0.59-2.11.s390x",
                "product": {
                  "name": "perl-YAML-LibYAML-0.59-2.11.s390x",
                  "product_id": "perl-YAML-LibYAML-0.59-2.11.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-LibYAML-0.59-2.11.x86_64",
                "product": {
                  "name": "perl-YAML-LibYAML-0.59-2.11.x86_64",
                  "product_id": "perl-YAML-LibYAML-0.59-2.11.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.59-2.11.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.aarch64"
        },
        "product_reference": "perl-YAML-LibYAML-0.59-2.11.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.59-2.11.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.ppc64le"
        },
        "product_reference": "perl-YAML-LibYAML-0.59-2.11.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.59-2.11.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.s390x"
        },
        "product_reference": "perl-YAML-LibYAML-0.59-2.11.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.59-2.11.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.x86_64"
        },
        "product_reference": "perl-YAML-LibYAML-0.59-2.11.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2012-1152",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2012-1152"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) module 0.38 for Perl allow remote attackers to cause a denial of service (process crash) via format string specifiers in a (1) YAML stream to the Load function, (2) YAML node to the load_node function, (3) YAML mapping to the load_mapping function, or (4) YAML sequence to the load_sequence function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.aarch64",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.ppc64le",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.s390x",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2012-1152",
          "url": "https://www.suse.com/security/cve/CVE-2012-1152"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 751503 for CVE-2012-1152",
          "url": "https://bugzilla.suse.com/751503"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.aarch64",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.ppc64le",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.s390x",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2012-1152"
    },
    {
      "cve": "CVE-2013-6393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-6393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.aarch64",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.ppc64le",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.s390x",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-6393",
          "url": "https://www.suse.com/security/cve/CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 860617 for CVE-2013-6393",
          "url": "https://bugzilla.suse.com/860617"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2013-6393",
          "url": "https://bugzilla.suse.com/911782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.aarch64",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.ppc64le",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.s390x",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-6393"
    },
    {
      "cve": "CVE-2014-2525",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-2525"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.aarch64",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.ppc64le",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.s390x",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-2525",
          "url": "https://www.suse.com/security/cve/CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 868944 for CVE-2014-2525",
          "url": "https://bugzilla.suse.com/868944"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2014-2525",
          "url": "https://bugzilla.suse.com/911782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.aarch64",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.ppc64le",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.s390x",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-2525"
    },
    {
      "cve": "CVE-2014-9130",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9130"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.aarch64",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.ppc64le",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.s390x",
          "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9130",
          "url": "https://www.suse.com/security/cve/CVE-2014-9130"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 907809 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/907809"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/911782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921588 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/921588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.aarch64",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.ppc64le",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.s390x",
            "openSUSE Tumbleweed:perl-YAML-LibYAML-0.59-2.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-9130"
    }
  ]
}

gsd-2013-6393

Vulnerability from gsd

Modified

2023-12-13 01:22

Details

Aliases

CVE-2013-6393

Aliases

CVE-2013-6393

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2013-6393",
    "description": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.",
    "id": "GSD-2013-6393",
    "references": [
      "https://www.suse.com/security/cve/CVE-2013-6393.html",
      "https://www.debian.org/security/2014/dsa-2870",
      "https://www.debian.org/security/2014/dsa-2850",
      "https://access.redhat.com/errata/RHSA-2014:0415",
      "https://access.redhat.com/errata/RHSA-2014:0364",
      "https://access.redhat.com/errata/RHSA-2014:0355",
      "https://access.redhat.com/errata/RHSA-2014:0354",
      "https://access.redhat.com/errata/RHSA-2014:0353",
      "https://advisories.mageia.org/CVE-2013-6393.html",
      "https://alas.aws.amazon.com/cve/html/CVE-2013-6393.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2013-6393"
      ],
      "details": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.",
      "id": "GSD-2013-6393",
      "modified": "2023-12-13T01:22:19.391611Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2013-6393",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "openSUSE-SU-2014:0273",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00065.html"
          },
          {
            "name": "DSA-2870",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2014/dsa-2870"
          },
          {
            "name": "APPLE-SA-2014-10-16-3",
            "refsource": "APPLE",
            "url": "http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
          },
          {
            "name": "APPLE-SA-2014-04-22-1",
            "refsource": "APPLE",
            "url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
          },
          {
            "name": "102716",
            "refsource": "OSVDB",
            "url": "http://osvdb.org/102716"
          },
          {
            "name": "https://bugzilla.redhat.com/attachment.cgi?id=847926\u0026action=diff",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/attachment.cgi?id=847926\u0026action=diff"
          },
          {
            "name": "MDVSA-2015:060",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:060"
          },
          {
            "name": "65258",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/65258"
          },
          {
            "name": "http://advisories.mageia.org/MGASA-2014-0040.html",
            "refsource": "CONFIRM",
            "url": "http://advisories.mageia.org/MGASA-2014-0040.html"
          },
          {
            "name": "openSUSE-SU-2015:0319",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html"
          },
          {
            "name": "RHSA-2014:0355",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0355.html"
          },
          {
            "name": "openSUSE-SU-2014:0272",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html"
          },
          {
            "name": "RHSA-2014:0354",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0354.html"
          },
          {
            "name": "https://support.apple.com/kb/HT6536",
            "refsource": "CONFIRM",
            "url": "https://support.apple.com/kb/HT6536"
          },
          {
            "name": "openSUSE-SU-2016:1067",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html"
          },
          {
            "name": "DSA-2850",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2014/dsa-2850"
          },
          {
            "name": "RHSA-2014:0353",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0353.html"
          },
          {
            "name": "https://bitbucket.org/xi/libyaml/commits/tag/0.1.5",
            "refsource": "CONFIRM",
            "url": "https://bitbucket.org/xi/libyaml/commits/tag/0.1.5"
          },
          {
            "name": "https://puppet.com/security/cve/cve-2013-6393",
            "refsource": "CONFIRM",
            "url": "https://puppet.com/security/cve/cve-2013-6393"
          },
          {
            "name": "USN-2098-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2098-1"
          }
        ]
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "\u003c0.2.3",
          "affected_versions": "All versions before 0.2.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cwe_ids": [
            "CWE-1035",
            "CWE-119",
            "CWE-937"
          ],
          "date": "2018-10-30",
          "description": "LibYAML, the library that libyaml provides bindings for is vulnerable to a heap-based buffer overflow when parsing YAML tags.",
          "fixed_versions": [
            "0.2.3"
          ],
          "identifier": "CVE-2013-6393",
          "identifiers": [
            "CVE-2013-6393"
          ],
          "package_slug": "npm/libyaml",
          "pubdate": "2014-02-06",
          "solution": "Update to version 0.2.3 that includes a version of LibYAML that contains a fix for this issue.",
          "title": "eap-based buffer overflow when parsing YAML tags",
          "urls": [
            "https://bitbucket.org/xi/libyaml/pull-request/1/fix-cve-2013-6393/diff"
          ],
          "uuid": "af3e4df1-553f-48ea-868c-a3a665f30244"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:pyyaml:libyaml:0.1.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pyyaml:libyaml:0.1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pyyaml:libyaml:0.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pyyaml:libyaml:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "0.1.4",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pyyaml:libyaml:0.1.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:openstack:4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:openstack:3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2013-6393"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "102716",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/102716"
            },
            {
              "name": "https://bugzilla.redhat.com/attachment.cgi?id=847926\u0026action=diff",
              "refsource": "MISC",
              "tags": [
                "Issue Tracking"
              ],
              "url": "https://bugzilla.redhat.com/attachment.cgi?id=847926\u0026action=diff"
            },
            {
              "name": "65258",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/65258"
            },
            {
              "name": "https://bitbucket.org/xi/libyaml/commits/tag/0.1.5",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking"
              ],
              "url": "https://bitbucket.org/xi/libyaml/commits/tag/0.1.5"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Issue Tracking"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
            },
            {
              "name": "USN-2098-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.ubuntu.com/usn/USN-2098-1"
            },
            {
              "name": "DSA-2850",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2014/dsa-2850"
            },
            {
              "name": "openSUSE-SU-2014:0272",
              "refsource": "SUSE",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html"
            },
            {
              "name": "openSUSE-SU-2014:0273",
              "refsource": "SUSE",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00065.html"
            },
            {
              "name": "DSA-2870",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2014/dsa-2870"
            },
            {
              "name": "RHSA-2014:0353",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0353.html"
            },
            {
              "name": "RHSA-2014:0355",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0355.html"
            },
            {
              "name": "RHSA-2014:0354",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0354.html"
            },
            {
              "name": "APPLE-SA-2014-04-22-1",
              "refsource": "APPLE",
              "tags": [
                "Broken Link"
              ],
              "url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
            },
            {
              "name": "APPLE-SA-2014-10-16-3",
              "refsource": "APPLE",
              "tags": [
                "Broken Link"
              ],
              "url": "http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html"
            },
            {
              "name": "https://support.apple.com/kb/HT6536",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://support.apple.com/kb/HT6536"
            },
            {
              "name": "openSUSE-SU-2015:0319",
              "refsource": "SUSE",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2014-0040.html",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://advisories.mageia.org/MGASA-2014-0040.html"
            },
            {
              "name": "MDVSA-2015:060",
              "refsource": "MANDRIVA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:060"
            },
            {
              "name": "openSUSE-SU-2016:1067",
              "refsource": "SUSE",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html"
            },
            {
              "name": "https://puppet.com/security/cve/cve-2013-6393",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://puppet.com/security/cve/cve-2013-6393"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-30T16:27Z",
      "publishedDate": "2014-02-06T22:55Z"
    }
  }
}

fkie_cve-2013-6393

Vulnerability from fkie_nvd

Published

2014-02-06 22:55

Modified

2025-04-11 00:51

Severity ?

Summary

References

URL	Tags
secalert@redhat.com	http://advisories.mageia.org/MGASA-2014-0040.html	Third Party Advisory
secalert@redhat.com	http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html	Broken Link
secalert@redhat.com	http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html	Broken Link
secalert@redhat.com	http://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html	Third Party Advisory
secalert@redhat.com	http://lists.opensuse.org/opensuse-updates/2014-02/msg00065.html	Third Party Advisory
secalert@redhat.com	http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html	Third Party Advisory
secalert@redhat.com	http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html	Third Party Advisory
secalert@redhat.com	http://osvdb.org/102716
secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2014-0353.html	Third Party Advisory
secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2014-0354.html	Third Party Advisory
secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2014-0355.html	Third Party Advisory
secalert@redhat.com	http://www.debian.org/security/2014/dsa-2850	Third Party Advisory
secalert@redhat.com	http://www.debian.org/security/2014/dsa-2870	Third Party Advisory
secalert@redhat.com	http://www.mandriva.com/security/advisories?name=MDVSA-2015:060	Third Party Advisory
secalert@redhat.com	http://www.securityfocus.com/bid/65258	Third Party Advisory, VDB Entry
secalert@redhat.com	http://www.ubuntu.com/usn/USN-2098-1	Third Party Advisory
secalert@redhat.com	https://bitbucket.org/xi/libyaml/commits/tag/0.1.5	Issue Tracking
secalert@redhat.com	https://bugzilla.redhat.com/attachment.cgi?id=847926&action=diff	Issue Tracking
secalert@redhat.com	https://bugzilla.redhat.com/show_bug.cgi?id=1033990	Issue Tracking, Patch
secalert@redhat.com	https://puppet.com/security/cve/cve-2013-6393
secalert@redhat.com	https://support.apple.com/kb/HT6536	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://advisories.mageia.org/MGASA-2014-0040.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2014-02/msg00065.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/102716
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2014-0353.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2014-0354.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2014-0355.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2014/dsa-2850	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2014/dsa-2870	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDVSA-2015:060	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/65258	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-2098-1	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://bitbucket.org/xi/libyaml/commits/tag/0.1.5	Issue Tracking
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/attachment.cgi?id=847926&action=diff	Issue Tracking
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/show_bug.cgi?id=1033990	Issue Tracking, Patch
af854a3a-2127-422b-91ae-364da2661108	https://puppet.com/security/cve/cve-2013-6393
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT6536	Third Party Advisory

Impacted products

Vendor	Product	Version
pyyaml	libyaml	*
pyyaml	libyaml	0.0.1
pyyaml	libyaml	0.1.1
pyyaml	libyaml	0.1.2
pyyaml	libyaml	0.1.3
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	12.10
canonical	ubuntu_linux	13.10
redhat	openstack	3.0
redhat	openstack	4.0
debian	debian_linux	6.0
debian	debian_linux	7.0
opensuse	leap	42.1
opensuse	opensuse	11.4
opensuse	opensuse	13.1
opensuse	opensuse	13.2

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pyyaml:libyaml:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "64CF0E49-704A-4190-9BA8-6332F1B12430",
              "versionEndIncluding": "0.1.4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pyyaml:libyaml:0.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F454F77-1AB1-44CF-8E1F-47BD71966CB8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pyyaml:libyaml:0.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F2A3FC6-ADD6-4890-A91E-7B42138CB1B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pyyaml:libyaml:0.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7892D90-243C-4588-92D0-F49B3443B3DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pyyaml:libyaml:0.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "9759A8FD-7010-4D10-9E26-A03FDDDA187B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2076871-2E80-4605-A470-A41C1A8EC7EE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F61F047-129C-41A6-8A27-FFCBB8563E91",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:openstack:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6533B15B-F748-4A5D-AB86-31D38DFAE60F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:openstack:4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1802FDB8-C919-4D5E-A8AD-4C5B72525090",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "036E8A89-7A16-411F-9D31-676313BB7244",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4863BE36-D16A-4D75-90D9-FD76DB5B48B7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE554781-1EB9-446E-911F-6C11970C47F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n yaml_parser_scan_tag_uri en scanner.c en LibYAML anterior a 0.1.5 lleva a cabo un \"cast\" incorrecto, lo que permite a atacantes remotos causar una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) y probablemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de etiquetas manipuladas en YAML."
    }
  ],
  "id": "CVE-2013-6393",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2014-02-06T22:55:03.217",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://advisories.mageia.org/MGASA-2014-0040.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Broken Link"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Broken Link"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00065.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://osvdb.org/102716"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0353.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0354.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0355.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2014/dsa-2850"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2014/dsa-2870"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:060"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/65258"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-2098-1"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bitbucket.org/xi/libyaml/commits/tag/0.1.5"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugzilla.redhat.com/attachment.cgi?id=847926\u0026action=diff"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://puppet.com/security/cve/cve-2013-6393"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.apple.com/kb/HT6536"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://advisories.mageia.org/MGASA-2014-0040.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00065.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/102716"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0353.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0354.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0355.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2014/dsa-2850"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2014/dsa-2870"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:060"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/65258"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-2098-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bitbucket.org/xi/libyaml/commits/tag/0.1.5"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugzilla.redhat.com/attachment.cgi?id=847926\u0026action=diff"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033990"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://puppet.com/security/cve/cve-2013-6393"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.apple.com/kb/HT6536"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

suse-su-2015:0953-1

Vulnerability from csaf_suse

Published

2015-02-10 14:18

Modified

2015-02-10 14:18

Summary

Security update for perl-YAML-LibYAML

Notes

Title of the patch

Security update for perl-YAML-LibYAML

Description of the patch

perl-YAML-LibYAML was updated to fix three security issues. These security issues were fixed: - CVE-2013-6393: The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performed an incorrect cast, which allowed remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggered a heap-based buffer overflow (bnc#860617, bnc#911782). - CVE-2014-9130: scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allowed context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping (bnc#907809, bnc#911782). - CVE-2014-2525: Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allowed context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file (bnc#868944, bnc#911782).

Patchnames

SUSE-SLE-SERVER-12-2015-215

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for perl-YAML-LibYAML",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "perl-YAML-LibYAML was updated to fix three security issues.\n\nThese security issues were fixed:\n- CVE-2013-6393: The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performed an incorrect cast, which allowed remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggered a heap-based buffer overflow (bnc#860617, bnc#911782).\n- CVE-2014-9130: scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allowed context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping (bnc#907809, bnc#911782).\n- CVE-2014-2525: Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allowed context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file (bnc#868944, bnc#911782).\n  ",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-SERVER-12-2015-215",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0953-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2015:0953-1",
        "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20150953-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2015:0953-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-May/001411.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 860617",
        "url": "https://bugzilla.suse.com/860617"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 868944",
        "url": "https://bugzilla.suse.com/868944"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 907809",
        "url": "https://bugzilla.suse.com/907809"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 911782",
        "url": "https://bugzilla.suse.com/911782"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-6393 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-6393/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-2525 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-2525/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9130 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9130/"
      }
    ],
    "title": "Security update for perl-YAML-LibYAML",
    "tracking": {
      "current_release_date": "2015-02-10T14:18:22Z",
      "generator": {
        "date": "2015-02-10T14:18:22Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2015:0953-1",
      "initial_release_date": "2015-02-10T14:18:22Z",
      "revision_history": [
        {
          "date": "2015-02-10T14:18:22Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-LibYAML-0.38-10.1.ppc64le",
                "product": {
                  "name": "perl-YAML-LibYAML-0.38-10.1.ppc64le",
                  "product_id": "perl-YAML-LibYAML-0.38-10.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-LibYAML-0.38-10.1.s390x",
                "product": {
                  "name": "perl-YAML-LibYAML-0.38-10.1.s390x",
                  "product_id": "perl-YAML-LibYAML-0.38-10.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-LibYAML-0.38-10.1.x86_64",
                "product": {
                  "name": "perl-YAML-LibYAML-0.38-10.1.x86_64",
                  "product_id": "perl-YAML-LibYAML-0.38-10.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12",
                  "product_id": "SUSE Linux Enterprise Server 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-6393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-6393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-6393",
          "url": "https://www.suse.com/security/cve/CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 860617 for CVE-2013-6393",
          "url": "https://bugzilla.suse.com/860617"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2013-6393",
          "url": "https://bugzilla.suse.com/911782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-02-10T14:18:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-6393"
    },
    {
      "cve": "CVE-2014-2525",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-2525"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-2525",
          "url": "https://www.suse.com/security/cve/CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 868944 for CVE-2014-2525",
          "url": "https://bugzilla.suse.com/868944"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2014-2525",
          "url": "https://bugzilla.suse.com/911782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-02-10T14:18:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-2525"
    },
    {
      "cve": "CVE-2014-9130",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9130"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9130",
          "url": "https://www.suse.com/security/cve/CVE-2014-9130"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 907809 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/907809"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/911782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921588 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/921588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-02-10T14:18:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-9130"
    }
  ]
}

suse-su-2015:0953-2

Vulnerability from csaf_suse

Published

2015-02-10 14:18

Modified

2015-02-10 14:18

Summary

Security update for perl-YAML-LibYAML

Notes

Title of the patch

Security update for perl-YAML-LibYAML

Description of the patch

Patchnames

SUSE-SLE-DESKTOP-12-2015-215,SUSE-SLE-SERVER-12-2015-215

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for perl-YAML-LibYAML",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "perl-YAML-LibYAML was updated to fix three security issues.\n\nThese security issues were fixed:\n- CVE-2013-6393: The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performed an incorrect cast, which allowed remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggered a heap-based buffer overflow (bnc#860617, bnc#911782).\n- CVE-2014-9130: scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allowed context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping (bnc#907809, bnc#911782).\n- CVE-2014-2525: Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allowed context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file (bnc#868944, bnc#911782).\n  ",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-2015-215,SUSE-SLE-SERVER-12-2015-215",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0953-2.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2015:0953-2",
        "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20150953-2/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2015:0953-2",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-May/001412.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 860617",
        "url": "https://bugzilla.suse.com/860617"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 868944",
        "url": "https://bugzilla.suse.com/868944"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 907809",
        "url": "https://bugzilla.suse.com/907809"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 911782",
        "url": "https://bugzilla.suse.com/911782"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-6393 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-6393/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-2525 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-2525/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9130 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9130/"
      }
    ],
    "title": "Security update for perl-YAML-LibYAML",
    "tracking": {
      "current_release_date": "2015-02-10T14:18:22Z",
      "generator": {
        "date": "2015-02-10T14:18:22Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2015:0953-2",
      "initial_release_date": "2015-02-10T14:18:22Z",
      "revision_history": [
        {
          "date": "2015-02-10T14:18:22Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-LibYAML-0.38-10.1.ppc64le",
                "product": {
                  "name": "perl-YAML-LibYAML-0.38-10.1.ppc64le",
                  "product_id": "perl-YAML-LibYAML-0.38-10.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-LibYAML-0.38-10.1.s390x",
                "product": {
                  "name": "perl-YAML-LibYAML-0.38-10.1.s390x",
                  "product_id": "perl-YAML-LibYAML-0.38-10.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-LibYAML-0.38-10.1.x86_64",
                "product": {
                  "name": "perl-YAML-LibYAML-0.38-10.1.x86_64",
                  "product_id": "perl-YAML-LibYAML-0.38-10.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12",
                  "product_id": "SUSE Linux Enterprise Desktop 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12",
                  "product_id": "SUSE Linux Enterprise Server 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-LibYAML-0.38-10.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
        },
        "product_reference": "perl-YAML-LibYAML-0.38-10.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-6393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-6393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-6393",
          "url": "https://www.suse.com/security/cve/CVE-2013-6393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 860617 for CVE-2013-6393",
          "url": "https://bugzilla.suse.com/860617"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2013-6393",
          "url": "https://bugzilla.suse.com/911782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-02-10T14:18:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-6393"
    },
    {
      "cve": "CVE-2014-2525",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-2525"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-2525",
          "url": "https://www.suse.com/security/cve/CVE-2014-2525"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 868944 for CVE-2014-2525",
          "url": "https://bugzilla.suse.com/868944"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2014-2525",
          "url": "https://bugzilla.suse.com/911782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-02-10T14:18:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-2525"
    },
    {
      "cve": "CVE-2014-9130",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9130"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9130",
          "url": "https://www.suse.com/security/cve/CVE-2014-9130"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 907809 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/907809"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911782 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/911782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921588 for CVE-2014-9130",
          "url": "https://bugzilla.suse.com/921588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server 12:perl-YAML-LibYAML-0.38-10.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:perl-YAML-LibYAML-0.38-10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-02-10T14:18:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-9130"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2013-6393 (GCVE-0-2013-6393)

Vulnerability from cvelistv5

Vulnerability from github

Recommendation

Vulnerability from csaf_redhat

Vulnerability from csaf_redhat

Vulnerability from csaf_redhat

Vulnerability from csaf_redhat

Vulnerability from csaf_redhat

Vulnerability from csaf_opensuse

Vulnerability from csaf_opensuse

Vulnerability from gsd

Vulnerability from fkie_nvd

Vulnerability from csaf_suse

Vulnerability from csaf_suse

Tags

Sightings

Nomenclature