Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Google

Published: 2022-11-11T13:10:10.912038Z

Updated: 2024-09-16T16:24:11.627Z

Reserved: 2022-09-30T00:00:00

Link: CVE-2022-41854

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-11-11T13:15:11.003

Modified: 2024-11-21T07:23:56.797

Link: CVE-2022-41854

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-11-13T00:00:00Z

Links: CVE-2022-41854 - Bugzilla