Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ yaml-rust Crate up to 0.4.0 on Rust Deserialization Recursion denial of service


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability classified as problematic has been found in yaml-rust Crate up to 0.4.0 on Rust (Rust Package). Affected is an unknown functionality of the component Deserialization. Upgrading to version 0.4.1 eliminates this vulnerability. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ serde_yaml 0.6.0/0.8.3 Deserialization YAML File Recursion denial of service


📈 48.77 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31605 | NVIDIA NVFLARE up to 2.1.1 YAML File yaml.load deserialization (GHSA-hrf3-622q-8366)


📈 42.72 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31115 | opensearch-ruby up to 2.0.0 YAML YAML.load deserialization (GHSA-977c-63xq-cgw3)


📈 42.72 Punkte
🕵️ Sicherheitslücken

🕵️ yaml-cpp 0.6.2 YAML File HandleFlowSequence denial of service


📈 38.53 Punkte
🕵️ Sicherheitslücken

🕵️ yaml-cpp 0.6.2 YAML File HandleFlowSequence denial of service


📈 38.53 Punkte
🕵️ Sicherheitslücken

🕵️ yaml-cpp 0.6.2 singledocparser.cpp YAML::SingleDocParser denial of service


📈 38.53 Punkte
🕵️ Sicherheitslücken

🕵️ yaml-cpp 0.5.3 YAML File HandleNode denial of service


📈 38.53 Punkte
🕵️ Sicherheitslücken

🕵️ yaml-cpp 0.6.2 YAML File HandleFlowMap denial of service


📈 38.53 Punkte
🕵️ Sicherheitslücken

🕵️ yaml-cpp 0.5.3 YAML File HandleNode Denial of Service


📈 38.53 Punkte
🕵️ Sicherheitslücken

🕵️ pystemon prior 2021-02-13 YAML Deserialization config.py safe_load deserialization


📈 36.86 Punkte
🕵️ Sicherheitslücken

🕵️ osbs-client up to 0.56.0 yaml.load() YAML File Remote Code Execution


📈 32.38 Punkte
🕵️ Sicherheitslücken

🕵️ ROS Actionlib actionlib/tools/library.py:132 yaml Loader yaml.safe_load input validation


📈 32.38 Punkte
🕵️ Sicherheitslücken

🔧 Why is Tail Recursion optimization faster than normal Recursion?


📈 32.19 Punkte
🔧 Programmierung

🕵️ CVE-2022-41237 | DotCi Plugin up to 2.40.00 on Jenkins YAML Parser deserialization


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-4178 | Fabric 8 Kubernetes Client 5.0.0-beta-1 YAML Parser deserialization (GHSA-98g7-rxmf-rrxm)


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ OneDev up to 4.0.2 YAML Parser deserialization


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ ElasticBox Jenkins Kubernetes CI-CD Plugin up to 1.3 on Jenkins YAML Parser deserialization


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ Ruby up to 2.2.9/2.3.6/2.4.3/2.5.0 RubyGems YAML File Deserialization privilege escalation


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ RubyGems up to 2.6.13 YAML Deserialization bypass Serialized Object privilege escalation


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-37288 | Elastic Kibana 8.15.0 YAML Parser deserialization


📈 26.52 Punkte
🕵️ Sicherheitslücken

💾 YAML Deserialization Attack In Python


📈 26.52 Punkte
💾 IT Security Tools

💾 Ruby On Rails JSON Processor YAML Deserialization Scanner


📈 26.52 Punkte
💾 IT Security Tools

🕵️ puppet up to 4.10.0 YAML Deserialization privilege escalation


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-24040 | Facebook ParlAI up to 1.0.x YAML deserialization (ID 164136)


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ MCollective up to 2.10.3 YAML Deserialization privilege escalation


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-1964 | Apache Heron YAML Parser deserialization


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ lintian up to 2.5.50.3 YAML File Deserialization privilege escalation


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-47986 | IBM Aspera Faspex 4.4.1 YAML deserialization (XFDB-243512)


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ Ruby bis 2.2.9/2.3.6/2.4.3/2.5.0 RubyGems YAML File Deserialization erweiterte Rechte


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-49297 | iterative PyDrive2 1.17.0 YAML deserialization (GHSA-v5f6-hjmf-9mc5)


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-47204 | transmute-core up to 1.13.4 YAML deserialization


📈 26.52 Punkte
🕵️ Sicherheitslücken

🕵️ MCollective bis 2.10.3 YAML Deserialization erweiterte Rechte


📈 26.52 Punkte
🕵️ Sicherheitslücken

⚠️ #0daytoday #IBM Aspera Faspex 4.4.1 - YAML deserialization Remote Code Execution Exploit [#0day #Exploit]


📈 26.52 Punkte
⚠️ PoC

🕵️ Vuln: Multiple Puppet Products YAML Deserialization CVE-2017-2295 Remote Code Execution Vulnerability


📈 26.52 Punkte
🕵️ Sicherheitslücken

⚠️ [remote] IBM Aspera Faspex 4.4.1 - YAML deserialization (RCE)


📈 26.52 Punkte
⚠️ PoC

matomo
•