perl-YAML-LibYAML was updated to fix three security issues.

These security issues were fixed :

  - CVE-2013-6393: The yaml_parser_scan_tag_uri function in     scanner.c in LibYAML before 0.1.5 performed an incorrect     cast, which allowed remote attackers to cause a denial     of service (application crash) and possibly execute     arbitrary code via crafted tags in a YAML document,     which triggered a heap-based buffer overflow     (bnc#860617, bnc#911782).

  - CVE-2014-9130: scanner.c in LibYAML 0.1.5 and 0.1.6, as     used in the YAML-LibYAML (aka YAML-XS) module for Perl,     allowed context-dependent attackers to cause a denial of     service (assertion failure and crash) via vectors     involving line-wrapping (bnc#907809, bnc#911782).

  - CVE-2014-2525: Heap-based buffer overflow in the     yaml_parser_scan_uri_escapes function in LibYAML before     0.1.6 allowed context-dependent attackers to execute     arbitrary code via a long sequence of percent-encoded     characters in a URI in a YAML file (bnc#868944,     bnc#911782).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially crafted tag that, when parsed by an application using libyaml, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

A vulnerability has been discovered and corrected in yaml :

The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow (CVE-2013-6393).

The updated packages have been upgraded to the 0.1.5 version which is not vulnerable to this issue.

Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially crafted tag that, when parsed by an application using libyaml, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

This update corrects this flaw in the copy that is embedded in the libyaml-libyaml-perl package.

This update fixes the following security issue with libyaml :

  - bnc#860617: Fixed heap based buffer overflow due to     integer misuse (CVE-2013-6393)

According to the versions of the libyaml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Heap-based buffer overflow in the     yaml_parser_scan_uri_escapes function in LibYAML before     0.1.6 allows context-dependent attackers to execute     arbitrary code via a long sequence of percent-encoded     characters in a URI in a YAML file.(CVE-2014-2525)

  - The yaml_parser_scan_tag_uri function in scanner.c in     LibYAML before 0.1.5 performs an incorrect cast, which     allows remote attackers to cause a denial of service     (application crash) and possibly execute arbitrary code     via crafted tags in a YAML document, which triggers a     heap-based buffer overflow.(CVE-2013-6393)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Florian Weimer discovered that LibYAML incorrectly handled certain large yaml documents. An attacker could use this issue to cause LibYAML to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated perl-YAML-LibYAML packages fix security vulnerabilities :

Florian Weimer of the Red Hat Product Security Team discovered a heap-based buffer overflow flaw in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a YAML document with a specially crafted tag that, when parsed by an application using libyaml, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application (CVE-2013-6393).

Ivan Fratric of the Google Security Team discovered a heap-based buffer overflow vulnerability in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a specially crafted YAML document that, when parsed by an application using libyaml, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application (CVE-2014-2525).

The perl-YAML-LibYAML package is being updated as it contains an embedded copy of LibYAML.

The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.

The remote Mac OS X host has a version of OS X Server installed that is prior to version 4.0.  It is, therefore, affected by the following vulnerabilities :

  - There are multiple vulnerabilities within the included     BIND, the most serious of which can lead to a denial of     service. (CVE-2013-3919, CVE-2013-4854, CVE-2014-0591)

  - There are multiple vulnerabilities within the included     LibYAML for the Profile Manager and ServerRuby, the most     serious of which can lead to arbitrary code execution.
    (CVE-2013-4164, CVE-2013-6393)

  - There are multiple vulnerabilities within the included     PostgreSQL, the most serious of which can lead to     arbitrary code execution. (CVE-2014-0060, CVE-2014-0061,     CVE-2014-0062, CVE-2014-0063, CVE-2014-0064,     CVE-2014-0065, CVE-2014-0066)

  - An error exists related to the way SSL 3.0 handles     padding bytes when decrypting messages encrypted using     block ciphers in cipher block chaining (CBC) mode. A     man-in-the-middle attacker can decrypt a selected byte     of a cipher text in as few as 256 tries if they are able     to force a victim application to repeatedly send the     same data over newly created SSL 3.0 connections. This     is also known as the 'POODLE' issue. (CVE-2014-3566)

  - A cross-site scripting flaw exists in the Xcode Server     due to not properly validating input before returning it     to the user. This can allow a remote attacker, using a     specially crafted request, to execute code within the     browser / server trust relationship. (CVE-2014-4406)

  - A SQL injection flaw exists in the Wiki Server due to     not properly sanitizing user input before using it in     SQL queries. This can allow a remote attacker, using a     specially crafted request, to inject or manipulate SQL     queries, thus allowing the manipulation or disclosure     of arbitrary data. (CVE-2014-4424)

  - A restriction bypass flaw exists in the Mail Server due     to SCAL changes being cached and not enforced until the     service had restarted. This can allow an authenticated     remote attacker to bypass those restrictions.
    (CVE-2014-4446)

  - A password disclosure flaw exists in the Profile Manager     due to passwords being potentially saved to a file when     editing or setting up a profile. This can allow a local     attacker to gain access to password information.
    (CVE-2014-4447)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
83869	SUSE SLED12 / SLES12 Security Update : perl-YAML-LibYAML (SUSE-SU-2015:0953-2)	Nessus	SuSE Local Security Checks	2015/5/28	2021/1/6	medium
72240	Debian DSA-2850-1 : libyaml - heap-based buffer overflow	Nessus	Debian Local Security Checks	2014/2/2	2021/1/11	medium
72532	Mandriva Linux Security Advisory : yaml (MDVSA-2014:034)	Nessus	Mandriva Local Security Checks	2014/2/17	2021/1/6	medium
72886	Debian DSA-2870-1 : libyaml-libyaml-perl - heap-based buffer overflow	Nessus	Debian Local Security Checks	2014/3/10	2021/1/11	medium
75262	openSUSE Security Update : libyaml (openSUSE-SU-2014:0272-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
124948	EulerOS Virtualization 3.0.1.0 : libyaml (EulerOS-SA-2019-1445)	Nessus	Huawei Local Security Checks	2019/5/14	2024/5/23	medium
72326	Ubuntu 12.04 LTS / 12.10 / 13.10 : libyaml vulnerability (USN-2098-1)	Nessus	Ubuntu Local Security Checks	2014/2/5	2021/1/19	medium
73445	Mandriva Linux Security Advisory : perl-YAML-LibYAML (MDVSA-2014:069)	Nessus	Mandriva Local Security Checks	2014/4/10	2021/1/6	medium
73652	Amazon Linux AMI : perl-YAML-LibYAML (ALAS-2014-324)	Nessus	Amazon Linux Local Security Checks	2014/4/23	2018/4/18	medium
78601	Mac OS X : OS X Server < 4.0 Multiple Vulnerabilities (POODLE)	Nessus	MacOS X Local Security Checks	2014/10/21	2023/6/23	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium