Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40279
HistoryApr 25, 2023 - 9:35 a.m.

Denial Of Service (DoS)

2023-04-2509:35:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
denial of service
yaml
parsedocument
parsealldocuments
prettifyerror
application crash

EPSS

0.001

Percentile

42.9%

yaml is vulnerable to Denial of Service (DoS) attacks. According to the documentation, the parseDocument and parseAllDocuments functions should never raise an exception. However, an exception that comes from the prettifyError function is thrown when these functions are given erroneous input that contains a lot (80) of carriage return characters (\r), which allows an attacker to cause an application crash.