CVE-2014-2525 Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded char...
MediumCVSS 6.8
EPSS 8.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libyaml(Debian:12) | < 0.1.4-3.2 | 0.1.4-3.2 |
| debian/libyaml(Debian:13) | < 0.1.4-3.2 | 0.1.4-3.2 |
| debian/libyaml(Debian:14) | < 0.1.4-3.2 | 0.1.4-3.2 |
| debian/libyaml-libyaml-perl(Debian:12) | < 0.41-5 | 0.41-5 |
| debian/libyaml-libyaml-perl(Debian:13) | < 0.41-5 | 0.41-5 |
| debian/libyaml-libyaml-perl(Debian:14) | < 0.41-5 | 0.41-5 |
| pyyaml libyaml | <= 0.1.5 | No fix listed |
| pyyaml libyaml | = 0.0.1 | No fix listed |
| pyyaml libyaml | = 0.1.1 | No fix listed |
| pyyaml libyaml | = 0.1.2 | No fix listed |
| pyyaml libyaml | = 0.1.3 | No fix listed |
| pyyaml libyaml | = 0.1.4 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
References
- Debian Security Tracker CVE-2014-2525 vendor-advisory
- advisories.mageia.org third-party-advisory
- openSUSE-SU-2014:0500 third-party-advisory vendor-advisory
- openSUSE-SU-2015:0319 third-party-advisory vendor-advisory
- openSUSE-SU-2016:1067 third-party-advisory vendor-advisory
- RHSA-2014:0353 vendor-advisory
- RHSA-2014:0354 vendor-advisory
- RHSA-2014:0355 vendor-advisory
- 57836 third-party-advisory
- 57966 third-party-advisory
- 57968 third-party-advisory
- support.apple.com
- DSA-2884 vendor-advisory
- DSA-2885 vendor-advisory
- www.getchef.com
- www.getchef.com
- www.getchef.com
- MDVSA-2015:060 vendor-advisory
- www.ocert.org us-government-resource
- 66478 vdb-entry
- USN-2160-1 vendor-advisory
- bitbucket.org exploit patch
- puppet.com
- bugs.debian.org issue-tracking