Lucene search
PRIOn knowledge basePRION:CVE-2022-25857HistoryAug 30, 2022 - 5:15 a.m.
Design/Logic Flaw
2022-08-3005:15:00
PRIOn knowledge base
www.prio-n.com
11
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 10.0 | |
| snakeyaml | lt | 1.31 |
References
bitbucket.org/snakeyaml/snakeyaml/commits/fc300780da21f4bb92c148bc90257201220cf174
bitbucket.org/snakeyaml/snakeyaml/issues/525
github.com/snakeyaml/snakeyaml/commit/fc300780da21f4bb92c148bc90257201220cf174
lists.debian.org/debian-lts-announce/2022/10/msg00001.html
security.snyk.io/vuln/SNYK-JAVA-ORGYAML-2806360
Related
cve
cve
CVE-2022-25857
2022-08-30 05:15:07
rocky
rocky
prometheus-jmx-exporter security update
2022-10-06 07:13:19
Satellite 6.13 Release
2023-05-05 15:39:58
ibm
ibm
oraclelinux
oraclelinux
prometheus-jmx-exporter security update
2022-10-06 00:00:00
nvd
nvd
CVE-2022-25857
2022-08-30 05:15:07
veracode
veracode
Denial Of Service (DoS)
2022-08-31 02:31:21
redhat
redhat
debiancve
debiancve
CVE-2022-25857
2022-08-30 05:15:07
nessus
nessus
RHEL 8 : prometheus-jmx-exporter (RHSA-2022:6820)
2022-10-06 00:00:00
Oracle Linux 8 : prometheus-jmx-exporter (ELSA-2022-6820)
2022-10-06 00:00:00
AlmaLinux 8 : prometheus-jmx-exporter (ALSA-2022:6820)
2022-10-08 00:00:00
osv
osv
Moderate: prometheus-jmx-exporter security update
2022-10-06 00:00:00
Moderate: prometheus-jmx-exporter security update
2022-10-06 07:13:19
CVE-2022-25857
2022-08-30 05:15:07
redhatcve
redhatcve
CVE-2022-25857
2022-09-14 12:44:14
amazon
amazon
Important: snakeyaml
2023-03-02 22:35:00
github
github
Uncontrolled Resource Consumption in snakeyaml
2022-08-31 00:00:24
cbl_mariner
cbl_mariner
CVE-2022-25857 affecting package snakeyaml 1.25-2
2024-06-26 15:36:28
ubuntucve
ubuntucve
CVE-2022-25857
2022-08-30 00:00:00
almalinux
almalinux
Moderate: prometheus-jmx-exporter security update
2022-10-06 00:00:00
cvelist
cvelist
CVE-2022-25857 Denial of Service (DoS)
2022-08-30 00:00:00
rubygems
rubygems
openvas
openvas
Fedora: Security Advisory for snakeyaml (FEDORA-2022-c01dd659fa)
2022-12-21 00:00:00
Fedora: Security Advisory for snakeyaml (FEDORA-2022-8a4e8aa190)
2022-12-21 00:00:00
Ubuntu: Security Advisory (USN-5944-1)
2023-03-13 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: snakeyaml-1.32-1.fc37
2022-12-21 01:29:20
[SECURITY] Fedora 36 Update: snakeyaml-1.32-1.fc36
2022-12-21 01:18:24
ubuntu
ubuntu
SnakeYAML vulnerabilities
2023-03-10 00:00:00
debian
debian
[SECURITY] [DLA 3132-1] snakeyaml security update
2022-10-02 22:06:40
freebsd
freebsd
cassandra3 -- multiple vulnerabilities
2023-01-11 00:00:00
suse
suse
Security update for snakeyaml (important)
2022-09-26 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00