CVE-2014-9130
Fixed in a distro release EPSS 13%
scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.
Products: pyyaml libyaml
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.4 | yaml | 0.1.6-r1 |
| Debian 12 | libyaml | 0.1.6-3 |
| Debian 12 | libyaml-libyaml-perl | 0.41-6 |
| Debian 12 | pyyaml | 3.11-2 |
| Debian 13 | libyaml | 0.1.6-3 |
| Debian 13 | libyaml-libyaml-perl | 0.41-6 |
| Debian 13 | pyyaml | 3.11-2 |
| Debian 14 | libyaml | 0.1.6-3 |
| Debian 14 | libyaml-libyaml-perl | 0.41-6 |
| Debian 14 | pyyaml | 3.11-2 |
| Debian 6.0 | libyaml | 0.1.3-1+deb6u5 |
| Debian 6.0 | libyaml-libyaml-perl | 0.33-1+squeeze4 |
| Debian 6.0 | pyyaml | 3.09-5+deb6u1 |
| Debian 7 | libyaml | 0.1.4-2+deb7u5 |
| Debian 7 | libyaml-libyaml-perl | 0.38-3+deb7u3 |
| Debian 7 | pyyaml | 3.10-4+deb7u1 |
| Red Hat Enterprise Linux 6 | libyaml | 0:0.1.3-4.el6_6 |
| Red Hat Enterprise Linux 6 | libyaml-debuginfo | 0:0.1.3-4.el6_6 |
| Red Hat Enterprise Linux 6 | libyaml-devel | 0:0.1.3-4.el6_6 |
| Red Hat Enterprise Linux 7 | libyaml | 0:0.1.4-11.el7_0 |
| Red Hat Enterprise Linux 7 | libyaml-debuginfo | 0:0.1.4-11.el7_0 |
| Red Hat Enterprise Linux 7 | libyaml-devel | 0:0.1.4-11.el7_0 |
| Red Hat openstack 4 | libyaml | 0:0.1.3-4.el6_6 |
| Red Hat openstack 4 | libyaml-debuginfo | 0:0.1.3-4.el6_6 |
| Red Hat openstack 4 | libyaml-devel | 0:0.1.3-4.el6_6 |
| Red Hat openstack 5 | libyaml | 0:0.1.3-4.el6_6 |
| Red Hat openstack 5 | libyaml-debuginfo | 0:0.1.3-4.el6_6 |
| Red Hat openstack 5 | libyaml-devel | 0:0.1.3-4.el6_6 |
| Red Hat rhel software collections 1 | libyaml | 0:0.1.3-4.el6_6 |
| Red Hat rhel software collections 1 | libyaml-debuginfo | 0:0.1.3-4.el6_6 |
| Red Hat rhel software collections 1 | libyaml-devel | 0:0.1.3-4.el6_6 |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 | python-PyYAML | 3.10-15.1 |
| SUSE Enterprise Storage 1.0 | python-PyYAML | 3.10-15.1 |
| SUSE Linux Enterprise Desktop 12 | perl-YAML-LibYAML | 0.38-10.1 |
| SUSE Linux Enterprise High Availability Extension 12 | python-PyYAML | 3.10-15.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | python-PyYAML | 3.10-15.1 |
| SUSE Linux Enterprise Server 12 | perl-YAML-LibYAML | 0.38-10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | perl-YAML-LibYAML | 0.38-10.1 |
| Ubuntu 14.04 LTS | libyaml | 0.1.4-3ubuntu3.1 |
| Ubuntu 14.04 LTS | libyaml-libyaml-perl | 0.41-5ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | pyyaml | 3.10-4ubuntu0.1 |
| openSUSE Tumbleweed | libyaml | 0.1.6-4.8 |
| openSUSE Tumbleweed | perl-YAML-LibYAML | 0.59-2.11 |