https://bugzilla.redhat.com/show_bug.cgi?id=2126789
Bug ID: 2126789
Summary: CVE-2022-25857 snakeyaml: Denial of Service due
missing to nested depth limitation for collections.
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: pdelbell(a)redhat.com
CC: fedoraproject.org(a)bluhm-de.com,
jaromir.capik(a)email.cz,
java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, mizdebsk(a)redhat.com, mo(a)morsi.org
Target Milestone: ---
Classification: Other
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial
of Service (DoS) due missing to nested depth limitation for collections.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2126789