CVE-2014-2525

Debian Bug report logs - #742732 libyaml: CVE-2014-2525: input sanitization errors Package: libyaml; Maintainer for libyaml is Anders Kaseorg <andersk@mitedu>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 26 Mar 2014 19:03:01 UTC Severity: grave Tags: fixed-upstream, patch, security, upstream Fo ...

LibYAML could be made to crash or run programs if it opened a specially crafted YAML document ...

libyaml-libyaml-perl could be made to crash or run programs if it opened a specially crafted YAML file ...

Ivan Fratric of the Google Security Team discovered a heap-based buffer overflow vulnerability in LibYAML, a fast YAML 11 parser and emitter library A remote attacker could provide a specially-crafted YAML document that, when parsed by an application using libyaml, would cause the application to crash or, potentially, execute arbitrary code with ...

The yaml_parser_scan_tag_uri function in scannerc in LibYAML before 015 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow Heap-based buffer overflow in the yaml_parser_scan ...

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 016 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file ...