{"id":"CVE-2014-9130","aliases":["ALPINE-CVE-2014-9130","DEBIAN-CVE-2014-9130","DLA-109-1","DLA-110-1","DLA-127-1","DSA-3102-1","DSA-3103-1","DSA-3115-1","EUVD-2014-8955","GHSA-wrq2-fvvw-grpm","MGASA-2014-0508","MGASA-2015-0004","RHSA-2015:0100","RHSA-2015:0112","RHSA-2015:0260","SUSE-RU-2015:0611-1","SUSE-SU-2015:0699-1","SUSE-SU-2015:0925-1","SUSE-SU-2015:0925-2","SUSE-SU-2015:0953-1","SUSE-SU-2015:0953-2","UBUNTU-CVE-2014-9130","USN-2461-1","USN-2461-2","USN-2461-3","openSUSE-SU-2024:10029-1","openSUSE-SU-2024:10520-1"],"status":"published","title":"scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl,...","description":"scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.13195,"percentile":0.96396,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2014-12-05T15:54:13Z","modified":"2026-10-23T15:47:35Z","fixes":[{"ecosystem":"Alpine:v3.4","package":"yaml","fixed_in":["0.1.6-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libyaml","fixed_in":["0.1.6-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libyaml","fixed_in":["0.1.6-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libyaml","fixed_in":["0.1.6-3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libyaml-libyaml-perl","fixed_in":["0.41-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libyaml-libyaml-perl","fixed_in":["0.41-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libyaml-libyaml-perl","fixed_in":["0.41-6"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pyyaml","fixed_in":["3.11-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pyyaml","fixed_in":["3.11-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pyyaml","fixed_in":["3.11-2"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"libyaml-libyaml-perl","fixed_in":["0.33-1+squeeze4"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"libyaml","fixed_in":["0.1.3-1+deb6u5"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"pyyaml","fixed_in":["3.09-5+deb6u1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libyaml","fixed_in":["0.1.4-2+deb7u5"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libyaml-libyaml-perl","fixed_in":["0.38-3+deb7u3"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"pyyaml","fixed_in":["3.10-4+deb7u1"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"yaml","fixed_in":["0.1.6-1.1.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"perl-YAML-LibYAML","fixed_in":["0.410.0-2.3.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"python-yaml","fixed_in":["3.10-5.1.mga4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libyaml","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libyaml-debuginfo","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libyaml-devel","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libyaml","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libyaml-debuginfo","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libyaml-devel","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libyaml","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libyaml-debuginfo","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libyaml-devel","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libyaml","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libyaml-debuginfo","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libyaml-devel","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libyaml","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libyaml-debuginfo","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libyaml-devel","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libyaml","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libyaml-debuginfo","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libyaml-devel","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libyaml","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libyaml-debuginfo","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libyaml-devel","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libyaml","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libyaml-debuginfo","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libyaml-devel","fixed_in":["0:0.1.4-11.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"libyaml","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"libyaml-debuginfo","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"libyaml-devel","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el6","package":"libyaml","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el6","package":"libyaml-debuginfo","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el6","package":"libyaml-devel","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"libyaml","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"libyaml-debuginfo","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:4::el6","package":"libyaml-devel","fixed_in":["0:0.1.3-4.el6_6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12","package":"python-PyYAML","fixed_in":["3.10-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-PyYAML","fixed_in":["3.10-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5","package":"python-PyYAML","fixed_in":["3.10-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 1.0","package":"python-PyYAML","fixed_in":["3.10-15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libyaml","fixed_in":["0.1.4-3ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libyaml-libyaml-perl","fixed_in":["0.41-5ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"pyyaml","fixed_in":["3.10-4ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.4","package":"yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.6-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.6-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.6-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.6-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libyaml-libyaml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libyaml-libyaml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libyaml-libyaml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41-6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11-2"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"libyaml-libyaml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.33-1+squeeze4"}]}],"versions":["0.33-1","0.33-1+squeeze1","0.33-1+squeeze2","0.33-1+squeeze3"]},{"source":"osv","ecosystem":"Debian:6.0","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.3-1+deb6u5"}]}],"versions":["0.1.3-1"]},{"source":"osv","ecosystem":"Debian:6.0","package":"pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.09-5+deb6u1"}]}],"versions":["3.09-5"]},{"source":"osv","ecosystem":"Debian:7","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.4-2+deb7u5"}]}],"versions":["0.1.4-2","0.1.4-2+deb7u1","0.1.4-2+deb7u2","0.1.4-2+deb7u3","0.1.4-2+deb7u4"]},{"source":"osv","ecosystem":"Debian:7","package":"libyaml-libyaml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38-3+deb7u3"}]}],"versions":["0.38-3","0.38-3+deb7u1","0.38-3+deb7u2"]},{"source":"osv","ecosystem":"Debian:7","package":"pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-4+deb7u1"}]}],"versions":["3.10-4"]},{"source":"osv","ecosystem":"Mageia:4","package":"yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.6-1.1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"perl-YAML-LibYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.410.0-2.3.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"python-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-5.1.mga4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libyaml-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libyaml-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libyaml-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libyaml-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libyaml-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libyaml-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libyaml-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libyaml-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-11.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"libyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"libyaml-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"libyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"libyaml-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"libyaml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"libyaml-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.3-4.el6_6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12","package":"python-PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5","package":"python-PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 1.0","package":"python-PyYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"perl-YAML-LibYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38-10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"perl-YAML-LibYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38-10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"perl-YAML-LibYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38-10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"perl-YAML-LibYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38-10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"perl-YAML-LibYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38-10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.4-3ubuntu3.1"}]}],"versions":["0.1.4-2build1","0.1.4-2ubuntu1","0.1.4-3ubuntu1","0.1.4-3ubuntu2","0.1.4-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libyaml-libyaml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41-5ubuntu0.14.04.1"}]}],"versions":["0.38-3","0.41-1","0.41-4","0.41-5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-4ubuntu0.1"}]}],"versions":["3.10-4build2","3.10-4build3","3.10-4build4"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.4-3ubuntu3.1"}]}],"versions":["0.1.4-2build1","0.1.4-2ubuntu1","0.1.4-3ubuntu1","0.1.4-3ubuntu2","0.1.4-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libyaml-libyaml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41-5ubuntu0.14.04.1"}]}],"versions":["0.38-3","0.41-1","0.41-4","0.41-5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10-4ubuntu0.1"}]}],"versions":["3.10-4build2","3.10-4build3","3.10-4build4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.6-4.8"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"perl-YAML-LibYAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.59-2.11"}]}],"bundled":4}],"products":[{"vendor":"pyyaml","product":"libyaml"}],"references":[{"url":"http://secunia.com/advisories/62705","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://bitbucket.org/xi/libyaml/commits/2b9156756423e967cfd09a61d125d883fca6f4f2","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence"]},{"url":"http://www.securityfocus.com/bid/71349","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.debian.org/security/2014/dsa-3102","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/62174","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0112.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/11/28/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","evidence"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:060","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2461-3","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3115","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2014/11/29/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://secunia.com/advisories/62774","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/11/28/8","tags":["mailing-list","x_refsource_MLIST","x_transferred","web","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0260.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/62723","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2461-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://puppet.com/security/cve/cve-2014-9130","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2461-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/62176","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://bitbucket.org/xi/libyaml/issue/10/wrapped-strings-cause-assert-failure","tags":["x_refsource_MISC","x_transferred","Exploit","evidence"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:242","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3103","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/60944","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/62164","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99047","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0100.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://linux.oracle.com/errata/ELSA-2015-0100.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/59947","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://advisories.mageia.org/MGASA-2014-0508.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9130","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wrq2-fvvw-grpm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2014-9130","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-9130","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0508.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1169369","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2015-0004.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14917","tags":["report"]},{"url":"https://www.debian.org/security/2014/dsa-3115","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0100","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0100.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9130","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0112","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0112.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0260","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0260.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20150611-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/653265","tags":["report"]},{"url":"https://bugzilla.suse.com/767279","tags":["report"]},{"url":"https://bugzilla.suse.com/808947","tags":["report"]},{"url":"https://bugzilla.suse.com/841731","tags":["report"]},{"url":"https://bugzilla.suse.com/855389","tags":["report"]},{"url":"https://bugzilla.suse.com/858971","tags":["report"]},{"url":"https://bugzilla.suse.com/860299","tags":["report"]},{"url":"https://bugzilla.suse.com/862408","tags":["report"]},{"url":"https://bugzilla.suse.com/867836","tags":["report"]},{"url":"https://bugzilla.suse.com/870159","tags":["report"]},{"url":"https://bugzilla.suse.com/872029","tags":["report"]},{"url":"https://bugzilla.suse.com/872298","tags":["report"]},{"url":"https://bugzilla.suse.com/872351","tags":["report"]},{"url":"https://bugzilla.suse.com/875231","tags":["report"]},{"url":"https://bugzilla.suse.com/875452","tags":["report"]},{"url":"https://bugzilla.suse.com/878550","tags":["report"]},{"url":"https://bugzilla.suse.com/878553","tags":["report"]},{"url":"https://bugzilla.suse.com/879904","tags":["report"]},{"url":"https://bugzilla.suse.com/879992","tags":["report"]},{"url":"https://bugzilla.suse.com/879998","tags":["report"]},{"url":"https://bugzilla.suse.com/880001","tags":["report"]},{"url":"https://bugzilla.suse.com/880022","tags":["report"]},{"url":"https://bugzilla.suse.com/880026","tags":["report"]},{"url":"https://bugzilla.suse.com/880027","tags":["report"]},{"url":"https://bugzilla.suse.com/880081","tags":["report"]},{"url":"https://bugzilla.suse.com/880087","tags":["report"]},{"url":"https://bugzilla.suse.com/880327","tags":["report"]},{"url":"https://bugzilla.suse.com/880388","tags":["report"]},{"url":"https://bugzilla.suse.com/880936","tags":["report"]},{"url":"https://bugzilla.suse.com/881111","tags":["report"]},{"url":"https://bugzilla.suse.com/881225","tags":["report"]},{"url":"https://bugzilla.suse.com/881522","tags":["report"]},{"url":"https://bugzilla.suse.com/881711","tags":["report"]},{"url":"https://bugzilla.suse.com/882468","tags":["report"]},{"url":"https://bugzilla.suse.com/883009","tags":["report"]},{"url":"https://bugzilla.suse.com/883057","tags":["report"]},{"url":"https://bugzilla.suse.com/883379","tags":["report"]},{"url":"https://bugzilla.suse.com/883487","tags":["report"]},{"url":"https://bugzilla.suse.com/884051","tags":["report"]},{"url":"https://bugzilla.suse.com/884081","tags":["report"]},{"url":"https://bugzilla.suse.com/884350","tags":["report"]},{"url":"https://bugzilla.suse.com/884366","tags":["report"]},{"url":"https://bugzilla.suse.com/885889","tags":["report"]},{"url":"https://bugzilla.suse.com/886391","tags":["report"]},{"url":"https://bugzilla.suse.com/886421","tags":["report"]},{"url":"https://bugzilla.suse.com/887538","tags":["report"]},{"url":"https://bugzilla.suse.com/887879","tags":["report"]},{"url":"https://bugzilla.suse.com/889363","tags":["report"]},{"url":"https://bugzilla.suse.com/889605","tags":["report"]},{"url":"https://bugzilla.suse.com/889721","tags":["report"]},{"url":"https://bugzilla.suse.com/889739","tags":["report"]},{"url":"https://bugzilla.suse.com/889905","tags":["report"]},{"url":"https://bugzilla.suse.com/892707","tags":["report"]},{"url":"https://bugzilla.suse.com/892711","tags":["report"]},{"url":"https://bugzilla.suse.com/893608","tags":["report"]},{"url":"https://bugzilla.suse.com/895001","tags":["report"]},{"url":"https://bugzilla.suse.com/895961","tags":["report"]},{"url":"https://bugzilla.suse.com/896029","tags":["report"]},{"url":"https://bugzilla.suse.com/896109","tags":["report"]},{"url":"https://bugzilla.suse.com/896238","tags":["report"]},{"url":"https://bugzilla.suse.com/896244","tags":["report"]},{"url":"https://bugzilla.suse.com/896254","tags":["report"]},{"url":"https://bugzilla.suse.com/896844","tags":["report"]},{"url":"https://bugzilla.suse.com/897723","tags":["report"]},{"url":"https://bugzilla.suse.com/898242","tags":["report"]},{"url":"https://bugzilla.suse.com/898426","tags":["report"]},{"url":"https://bugzilla.suse.com/898428","tags":["report"]},{"url":"https://bugzilla.suse.com/899266","tags":["report"]},{"url":"https://bugzilla.suse.com/900956","tags":["report"]},{"url":"https://bugzilla.suse.com/901058","tags":["report"]},{"url":"https://bugzilla.suse.com/901108","tags":["report"]},{"url":"https://bugzilla.suse.com/901193","tags":["report"]},{"url":"https://bugzilla.suse.com/901675","tags":["report"]},{"url":"https://bugzilla.suse.com/901776","tags":["report"]},{"url":"https://bugzilla.suse.com/901927","tags":["report"]},{"url":"https://bugzilla.suse.com/901928","tags":["report"]},{"url":"https://bugzilla.suse.com/901958","tags":["report"]},{"url":"https://bugzilla.suse.com/902182","tags":["report"]},{"url":"https://bugzilla.suse.com/902373","tags":["report"]},{"url":"https://bugzilla.suse.com/902494","tags":["report"]},{"url":"https://bugzilla.suse.com/902503","tags":["report"]},{"url":"https://bugzilla.suse.com/902915","tags":["report"]},{"url":"https://bugzilla.suse.com/903064","tags":["report"]},{"url":"https://bugzilla.suse.com/903720","tags":["report"]},{"url":"https://bugzilla.suse.com/903723","tags":["report"]},{"url":"https://bugzilla.suse.com/903880","tags":["report"]},{"url":"https://bugzilla.suse.com/903961","tags":["report"]},{"url":"https://bugzilla.suse.com/904690","tags":["report"]},{"url":"https://bugzilla.suse.com/904699","tags":["report"]},{"url":"https://bugzilla.suse.com/904703","tags":["report"]},{"url":"https://bugzilla.suse.com/904732","tags":["report"]},{"url":"https://bugzilla.suse.com/904841","tags":["report"]},{"url":"https://bugzilla.suse.com/904959","tags":["report"]},{"url":"https://bugzilla.suse.com/905072","tags":["report"]},{"url":"https://bugzilla.suse.com/905263","tags":["report"]},{"url":"https://bugzilla.suse.com/905530","tags":["report"]},{"url":"https://bugzilla.suse.com/906850","tags":["report"]},{"url":"https://bugzilla.suse.com/906851","tags":["report"]},{"url":"https://bugzilla.suse.com/906887","tags":["report"]},{"url":"https://bugzilla.suse.com/907086","tags":["report"]},{"url":"https://bugzilla.suse.com/907106","tags":["report"]},{"url":"https://bugzilla.suse.com/907337","tags":["report"]},{"url":"https://bugzilla.suse.com/907527","tags":["report"]},{"url":"https://bugzilla.suse.com/907586","tags":["report"]},{"url":"https://bugzilla.suse.com/907643","tags":["report"]},{"url":"https://bugzilla.suse.com/907645","tags":["report"]},{"url":"https://bugzilla.suse.com/907646","tags":["report"]},{"url":"https://bugzilla.suse.com/907677","tags":["report"]},{"url":"https://bugzilla.suse.com/907809","tags":["report"]},{"url":"https://bugzilla.suse.com/908317","tags":["report"]},{"url":"https://bugzilla.suse.com/908320","tags":["report"]},{"url":"https://bugzilla.suse.com/908849","tags":["report"]},{"url":"https://bugzilla.suse.com/909724","tags":["report"]},{"url":"https://bugzilla.suse.com/910243","tags":["report"]},{"url":"https://bugzilla.suse.com/910482","tags":["report"]},{"url":"https://bugzilla.suse.com/910494","tags":["report"]},{"url":"https://bugzilla.suse.com/911166","tags":["report"]},{"url":"https://bugzilla.suse.com/911180","tags":["report"]},{"url":"https://bugzilla.suse.com/911272","tags":["report"]},{"url":"https://bugzilla.suse.com/911808","tags":["report"]},{"url":"https://bugzilla.suse.com/912035","tags":["report"]},{"url":"https://bugzilla.suse.com/912057","tags":["report"]},{"url":"https://bugzilla.suse.com/912886","tags":["report"]},{"url":"https://bugzilla.suse.com/913215","tags":["report"]},{"url":"https://bugzilla.suse.com/913221","tags":["report"]},{"url":"https://bugzilla.suse.com/913939","tags":["report"]},{"url":"https://bugzilla.suse.com/914260","tags":["report"]},{"url":"https://bugzilla.suse.com/914437","tags":["report"]},{"url":"https://bugzilla.suse.com/914900","tags":["report"]},{"url":"https://bugzilla.suse.com/915140","tags":["report"]},{"url":"https://bugzilla.suse.com/919448","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9130","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150699-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/921588","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150925-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150925-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150953-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/860617","tags":["report"]},{"url":"https://bugzilla.suse.com/868944","tags":["report"]},{"url":"https://bugzilla.suse.com/911782","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2525","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150953-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-9130","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2461-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2461-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2461-3","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1152","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-9130","description":"scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.","status":"published","published":"2014-12-08T16:00:00Z","modified":"2024-08-06T13:33:13.456Z","updated_at":"2026-11-02T14:33:42.882687Z"}],"euvd":[{"id":"EUVD-2014-8955","description":"scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.","status":"published","published":"2014-12-08T16:00:00Z","modified":"2024-08-06T13:33:13Z","updated_at":"2026-11-03T01:56:50.141542Z"}],"ghsa":[{"id":"GHSA-wrq2-fvvw-grpm","title":"scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl,...","description":"scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.","status":"published","published":"2022-05-17T00:16:50Z","modified":"2023-02-03T05:01:18Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:52:57.108682Z"}],"nvd":[{"id":"CVE-2014-9130","description":"scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.","status":"published","published":"2014-12-08T16:59:04.45Z","modified":"2026-06-17T00:17:48.223Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:57.680258Z"}],"osv":[{"id":"ALPINE-CVE-2014-9130","description":"scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.","status":"published","published":"2014-12-08T16:59:04.45Z","modified":"2026-10-23T15:17:40.503745028Z","updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"CVE-2014-9130","description":"scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.","status":"published","published":"2014-12-08T16:59:04Z","modified":"2026-04-16T06:16:48.308484654Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2014-9130","description":"scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.","status":"published","published":"2014-12-08T16:59:04.45Z","modified":"2026-10-23T15:47:35.668224828Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"DLA-109-1","title":"libyaml-libyaml-perl - security update","status":"published","published":"2014-12-14T00:00:00Z","modified":"2026-03-09T01:01:38.680722Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-110-1","title":"libyaml - security update","status":"published","published":"2014-12-14T00:00:00Z","modified":"2026-03-09T01:01:28.286403Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-127-1","title":"pyyaml - security update","status":"published","published":"2015-01-03T00:00:00Z","modified":"2026-03-09T01:01:42.138471Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-3102-1","title":"libyaml - security update","status":"published","published":"2014-12-13T00:00:00Z","modified":"2026-03-09T01:19:06.368859Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"DSA-3103-1","title":"libyaml-libyaml-perl - security update","status":"published","published":"2014-12-13T00:00:00Z","modified":"2026-03-09T01:21:17.071258Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"DSA-3115-1","title":"pyyaml - security update","status":"published","published":"2014-12-29T00:00:00Z","modified":"2026-03-09T01:19:39.385663Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0508","title":"Updated yaml \u0026 perl-YAML-LibYAML packages fix CVE-2014-9130","description":"Updated yaml and perl-YAML-LibYAML packages fix security vulnerability:\n\nAn assertion failure was found in the way the libyaml library parsed wrapped\nstrings. An attacker able to load specially crafted YAML input into an\napplication using libyaml could cause the application to crash\n(CVE-2014-9130).\n\nThe perl-YAML-LibYAML package is also affected, as it was derived from the\nsame code.  Both have been patched to fix this issue.\n","status":"published","published":"2014-12-05T15:54:13Z","modified":"2026-04-16T06:25:49.609727273Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2015-0004","title":"Updated python-yaml packages fix security vulnerability","description":"Updated python-yaml packages fix security vulnerability:\n\nJonathan Gray and Stanislaw Pitucha found an assertion failure in the way\nwrapped strings are parsed in Python-YAML, a YAML parser and emitter for\nPython. An attacker able to load specially crafted YAML input into an\napplication using python-yaml could cause the application to crash.\n\nThis issue is similar to CVE-2014-9130, but the assertion was independently\nimplemented in Python-YAML.\n","status":"published","published":"2015-01-05T16:30:30Z","modified":"2026-04-16T06:24:01.954805197Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10029-1","title":"libyaml-0-2-0.1.6-4.8 on GA media","description":"These are all security issues fixed in the libyaml-0-2-0.1.6-4.8 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:05:29.534362Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10520-1","title":"perl-YAML-LibYAML-0.59-2.11 on GA media","description":"These are all security issues fixed in the perl-YAML-LibYAML-0.59-2.11 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:51:34.630254Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2015:0100","title":"Red Hat Security Advisory: libyaml security update","status":"published","published":"2024-09-13T09:21:34Z","modified":"2026-06-29T10:08:23Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2015:0112","title":"Red Hat Security Advisory: libyaml security update","status":"published","published":"2024-09-13T09:20:55Z","modified":"2026-06-29T10:08:24Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2015:0260","title":"Red Hat Security Advisory: libyaml security update","status":"published","published":"2024-09-13T09:21:21Z","modified":"2026-06-29T10:08:32Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-RU-2015:0611-1","title":"Recommended update for SUSE Manager Server 2.1","description":"\nThis collective update for SUSE Manager Server 2.1 provides the following \nnew features:\n\n    * Connect SUSE Manager to the SUSE Customer Center.\n    * Manage SLE12 systems.\n    * ISS: export/import information about cloned channels to support\n      Service Pack migration on ISS slaves. (FATE#317789)\n    * New API calls: system.scheduleSPMigration(),\n      system.scheduleDistUpgrade(). (FATE#314785, FATE#314340)\n\nAdditionally, several issues have been fixed:\n\nauditlog-keeper:\n\n    * Fix value too long for type character varying(2048). (bnc#872351)\n    * Fix init.d script restart. (bsc#872029)\n\ncobbler:\n\n    * Require syslinux-x86_64 on s390x. (bsc#884051)\n    * Fix fetching of profiles for auto-installation. (bsc#880936)\n    * Fix port guessing in koan. (bsc#855389)\n    * Add 'copy-default' option to grubby-compat. (bsc#855389)\n    * Handle elilo in SUSE. (bsc#855389)\n    * Fix wrong option 'text' in SUSE environment. (bsc#901058)\n    * Fix re-installation on SLE with static network configuration.\n      (bsc#883487)\n    * Add RHEL 7 as a valid operating system version.\n\noracle-config:\n\n    * No need to pre-require Apache as its user and group are available in\n      the base system.\n\nosad:\n\n    * Enable and install osad during first installation. (bsc#901958)\n\npxe-default-image:\n\n    * Add bind-utils (dig) to packagelist. (bsc#889739)\n    * Wait for gateway to become available before register. (bsc#895001)\n\nrhnlib:\n\n    * Ensure bytes strings are sent to pyOpenSSL. (bnc#880388)\n\nrhnpush:\n\n    * Add default path structure to proxy lookaside that avoids collisions.\n\nsm-ncc-sync-data:\n\n    * Add SUSE Cloud 4 channels. (bnc#883057)\n    * Add channels for SUSE Manager Server 2.1 s390x.\n    * Fix parent label of the LTSS channel for SLMS.\n    * Add ATI and nVidia channels for SLED11-SP3. (bsc#901108)\n    * Add support for RES7 in SUSE Manager. (bsc#897723, bsc#893608)\n\nsmdba:\n\n    * Fix 'system check breaks backup and other configuration'.\n    * Implement rotating PostgreSQL backup. (bsc#896244)\n    * Space reclamation caused ORA-00942: table or view does not exist.\n      (bsc#906850)\n    * Archival of PosgreSQL transaction log does not recover in case of no\n      space left on device. (bsc#915140)\n\nspacecmd:\n\n    * Fix listupgrades. (bsc#892707)\n    * Make print_result a static method of SpacewalkShell. (bsc#889605)\n    * Call listAutoinstallableChannels() for listing distributions.\n      (bsc#887879)\n    * Fix spacecmd schedule listing. (bsc#902494)\n    * Fix call of setCustomOptions() during kickstart_importjson.\n      (bsc#879904)\n    * Fix configchannel export: do not create 'contents' key for\n      directories. (bsc#908849)\n\nspacewalk-backend:\n\n    * Insert update tag at the correct place for SLE12. (bsc#907677)\n    * Trigger generation of metadata if the repo contains no packages.\n      (bsc#870159)\n    * Convert mtime to localtime to prevent invalid times because of DST.\n      (bsc#914437)\n    * Do not exit with error if a vendor channel has no URL associated.\n      (bsc#914260)\n    * Convert empty string to null for DMI values. (bsc#911272)\n\nspacewalk-branding:\n\n    * CVE patches adapted for colour blind users. (bnc#872298)\n    * Underline in icons is removed. (bnc#880001)\n    * Fix link to macro documentation. (bsc#895961)\n    * Fix branding in error message. (bsc#902503)\n\nspacewalk-certs-tools:\n\n    * Fix removal of existing host key entries. (bsc#886391)\n    * Remove duplicates from authorized_keys2 as well. (bsc#885889)\n    * Do not allow registering a SUSE Manager server against itself.\n      (bsc#841731)\n\nspacewalk-client-tools:\n\n    * Allow unicode characters in proxy username and password.\n    * Send correct hostname. (bsc#887538)\n\nspacewalk-config:\n\n    * Add recommended Apache settings from the Security Team.\n\nspacewalk-java:\n\n    * Fix human dates now() staying unmodified. (bnc#880081)\n    * Allow for null evr and archs on event history detail. (bnc#880327)\n    * Disable form autocompletion in some places. (bnc#879998)\n    * Fix datepicker time at xx:xx PM pre-filled with xx:xx AM.\n      (bnc#881522)\n    * Fixed package upgrade via SSM when using the Oracle DB as backend.\n      (bnc#889721)\n    * This update fixes various cross-site scripting (XSS) issues in\n      spacewalk-java. (CVE-2014-3654, bnc#902182)\n    * Sync correct repositories. (bnc#904959)\n    * Fix pxt page link to point to the ported version of that page.\n      (bsc#903720)\n    * Correctly apply patches to multiple systems in SSM. (bsc#898242)\n    * Fix CVE audit when some packages of a patch are already installed.\n      (bsc#899266)\n    * Download CSV button does not export all columns ('Base Channel'\n      missing). (bsc#896238)\n    * Read and display only a limited number of logfile lines. (bsc#883009)\n    * Fix package upgrade via SSM. (bsc#889721)\n    * Fix logrotate for /var/log/rhn/rhn_web_api.log. (bsc#884081)\n    * Throw channel name exception if name is already used. (bnc#901675)\n    * Don't commit when XMLRPCExceptions are thrown. (bsc#908320)\n    * Remove 'Select All' button from system currency report. (bsc#653265)\n    * Fix documentation search. (bsc#875452)\n    * Add API listAutoinstallableChannels(). (bsc#887879)\n    * Avoid ArrayIndexOutOfBoundsException with invalid URLs. (bsc#892711)\n    * Avoid NumberFormatException in case of invalid URL. (bsc#892711)\n    * Lookup kickstart tree only when org is found. (bsc#892711)\n    * Fix NPE on GET /rhn/common/DownloadFile.do. (bsc#892711)\n    * Port of the advanced provisioning option page to bootstrap.\n      (bnc#862408)\n    * mgr-sync refresh sets wrong permissions on JSON files. (bnc#907337)\n    * Fix link to macro documentation. (bsc#895961)\n    * Forward to 'raw mode' page in case this is an uploaded profile.\n      (bsc#904841)\n    * Enlarge big text area to use more available screen space.\n      (bnc#867836)\n    * Fix links to monitoring documentation. (bsc#906887)\n    * Fix install type detection. (bsc#875231)\n    * Point 'Register Clients' link to 'Client Configuration Guide'.\n      (bsc#880026)\n    * Change order of installer type: prefer SUSE Linux. (bsc#860299)\n    * Fix ISE when clicking system currency. (bnc#905530)\n    * Set cobbler hostname variable when calling system.createSystemRecord.\n      (bnc#904699)\n    * Fix wrong install=http://nullnull line when calling\n      system.createSystemRecord. (bnc#904699)\n    * Explain snapshot/rollback behavior better. (bsc#808947)\n    * Fix patch syncing: prevent hibernate.NonUniqueObjectException\n      androllback. (bsc#903880)\n    * Remove 'Add Selected to SSM' from system overview page. (bsc#901776)\n    * Fix CVE audit in case of multi-version package installed and patch in\n      multi channels. (bsc#903723)\n    * Update channel family membership when channel is updated.\n      (bsc#901193)\n    * Add log warning if uploaded file size \u003e 1MB. (bnc#901927)\n    * Fix channel package compare. (bsc#904690)\n    * Fix automatic configuration file deployment via snippet. (bsc#898426)\n    * Add client hostname or IP to log messages. (bsc#904732)\n    * Fixed copying text from kickstart snippets. (bsc#880087)\n    * Fix auditlog config yaml syntax. (bsc#913221)\n    * Show Proxy tab if system is a proxy even when assigned to cloned\n      channels. (bsc#913939)\n    * Fixed uncaught error which prevent correct error handling.\n      (bsc#858971)\n    * Fix NPE by setting max_members to 0 instead of NULL. (bsc#912035)\n    * Fix more cross-site-scripting (XSS) issues. (CVE-2014-7811,\n      bsc#902915)\n    * Fix basic authentication for HTTP proxies. (bsc#912057)\n    * Accept repos with same SCC ID and different URLs. (bsc#911808)\n    * Avoid mgr-sync-refresh failure because clear_log_id was not called.\n      (bsc#911166)\n    * Fix cross-site-scripting (XSS) issue in system-group (CVE-2014-7812,\n      bsc#912886)\n    * Fix 'Select All' buttons display on rhn:list and make it consistent\n      with new rl:list. (bsc#909724)\n    * Fix List tag missing submit parameter for 'Select All' and others.\n      (bnc#909724)\n    * Sort filelist in configfile.compare event history alphabetically.\n      (bsc#910243)\n    * Allow parenthesis in system group description. (bsc#903064)\n    * Provide new API documentation in PDF format. (bsc#896029)\n    * Update the example scripts section. (bsc#896029)\n    * Fixed wording issues on package lock page. (bsc#880022)\n    * Make text more clear for package profile sync. (bsc#884350)\n\nspacewalk-reports:\n\n    * Added channel- and server-group-ids to activation-keys.\n    * Added spacewalk-report for systems with extra packages.\n\nspacewalk-search:\n\n    * Fix package searching in shared channels.\n\nspacewalk-setup:\n\n    * Setup /etc/sudoers in SUSE Manager upgrade scripts (bnc#881711)\n    * No activation if database population should be skipped. (bsc#900956)\n    * Do not enable spacewalk-service in runlevel 4. (bsc#879992)\n\nspacewalk-utils:\n\n    * Fixed spacewalk-hostname-rename to work with PostgreSQL backend.\n    * Added limitation of spacewalk-clone-by-date for RHEL4 and earlier.\n    * Add openSUSE 13.2 repositories to spacewalk-common-channels.\n    * Improve clone-by-date dependency resolution.\n    * Add CentOS 7 and EPEL 7 channels.\n    * Fix error if blacklist / removelist is not in scbd configurationfile.\n\nspacewalk-web:\n\n    * Fix links to monitoring documentation. (bsc#906887)\n    * Show Proxy tab if system is a proxy even when assigned to cloned\n      channels. (bsc#913939)\n\nsupportutils-plugin-susemanager:\n\n    * Write current service and repository configuration into\n      supportconfig.\n\nsusemanager-manuals_en, susemanager-jsp_en:\n\n    * Clarification about supported Web browsers. (bsc#889905)\n    * Update text and image files. (bnc#907527)\n    * Document NCC to SCC switch with SUSE Manager 2.1. (bnc#907106,\n      bnc#907643, bnc#907645, bnc#907646)\n    * SUSE Manager server update description. (bnc#902373)\n    * Activation keys and packages. (bnc#767279)\n    * Cobbler (bnc#880027), Link fix (bnc#881225), Wagon (bnc#884366)\n    * Install and ship the built PDFs. (bnc#907086)\n    * Update text and image files (bsc#910494).\n    * Firewall rules are incomplete - ssh-push and ssh-push-tunnel settings\n      missing. (bsc#904703)\n    * Document SP migration and ISS. (bsc#913215, partially).\n    * Fix 'beta packages' mentioned in documentation. (bsc#886421).\n    * User guide: Snapshots: clarify snaphot usage. (bsc#906851).\n    * Document maximal supported configuration file limit. (bsc#910482).\n\nsusemanager-schema:\n\n    * Add SLE 12 distribution targets to database.\n    * Fix evr_t schema upgrade. (bsc#881111)\n    * Allow evr_t to be compared with NULL in Oracle. (bsc#881111)\n    * Add support to ppc64le architecture.\n    * Fix migration script names to fix bare-metal registration.\n      (bsc#896109)\n    * Create regular index instead and have one migration per DB.\n      (bsc#905072)\n    * Drop unique index on package ids. (bsc#905072)\n    * Fix NPE by setting max_members to 0 instead of NULL. (bsc#912035)\n    * Fix old migration for future reference. (bsc#911180)\n    * Avoid NPE when migrating to SCC on Oracle migrated from 1.7.\n      (bsc#911180)\n\nsusemanager:\n\n    * Update the sudoers file after SUSE Manager upgrade. (bnc#881711)\n    * Fix oracle2postgres.sh (database configuration).\n    * Replace /etc/motd after setup. (bsc#883379)\n    * Make mgr-create-bootstrap-repo SCC and SLE 12 aware.\n    * Abort setup when invalid SSL country code given. (bnc#882468)\n    * Use noRepoSync parameter always.\n    * Fixed error message on exception in mgr-sync. (bnc#905263)\n    * Fixed add product to not trigger redundant addition of base channel.\n      (bnc#901928)\n    * Ask for the authentication beforehand. (bsc#908317)\n\nsusemanager-sync-data:\n\n    * Add channels for Public Cloud Module. (bsc#907586)\n    * Add new channel families SLE-WE and SLE-LP.\n    * Add ATI and nVidia channels for SLED11-SP3. (bsc#901108)\n    * Add channels for IBM-DLPAR for SLE12 ppc64le.\n    * Added support for RES7 in SUSE Manager. (bsc#897723, bsc#893608)\n\nsuseRegisterInfo:\n\n    * Re-add legacy suse_register_info to successfully perform the update.\n      (bsc#898428)\n\nzypp-plugin-spacewalk:\n\n    * Check for retrieveOnly option in up2date configuration and set\n      download_only. (bsc#896254)\n    * Changed the spec file to force usage of the official python VM.\n      (bsc#889363)\n\nyum:\n\n    * Preserve query parameters in URLs. (bsc#896844)\n\nstruts:\n\n    * CVE-2014-0114: The ActionForm object in Apache Struts 1.x through\n      1.3.10 allows remote attackers to 'manipulate' the ClassLoader and\n      execute arbitrary code via the class parameter, which is passed to\n      the getClass method.\n\napache2-mod_wsgi:\n\n    * CVE-2014-0242: Information exposure. (bnc#878553)\n    * CVE-2014-0240: Local privilege escalation. (bnc#878550)\n    * CVE-2014-8583: Failure to handle errors when attempting to drop group\n      privileges. (bnc#903961)\n\nlibyaml-0-2:\n\n    * Assert failure when processing wrapped strings (bnc#907809,\n      CVE-2014-9130)\n\ntanukiwrapper:\n\n    * Allow more than 4G as -Xmx option. (bsc#914900)\n\nThe following new packages have been added to the product: \nsusemanager-sync-data, google-gson, python-enum34.\n\nHow to apply this update:\n\n   1. Log in as root user to the SUSE Manager server.\n   2. Stop the Spacewalk service: spacewalk-service stop\n   3. Apply the patch using either zypper patch or YaST Online Update.\n   4. Upgrade the database schema with spacewalk-schema-upgrade\n   5. Start the Spacewalk service: spacewalk-service start\n\nSecurity Issues:\n\n    * CVE-2014-0114\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0114\u003e\n    * CVE-2014-0240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0240\u003e\n    * CVE-2014-0242\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0242\u003e\n    * CVE-2014-3654\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3654\u003e\n    * CVE-2014-7811\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7811\u003e\n    * CVE-2014-7812\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7812\u003e\n    * CVE-2014-8583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8583\u003e\n    * CVE-2014-9130\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9130\u003e\n\n","status":"published","published":"2015-02-25T20:05:05Z","modified":"2026-02-04T02:40:28.489451Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0699-1","title":"Security update for python-PyYAML","description":"\npython-PyYAML was updated to fix one security issue which could have \nallowed an attacker to cause a denial of service by supplying specially \ncrafted strings. (CVE-2014-9130, bsc#921588)\n\nSecurity Issues:\n\n    * CVE-2014-9130\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9130\u003e\n\n","status":"published","published":"2015-03-12T09:33:36Z","modified":"2026-02-04T04:19:34.537217Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0925-1","title":"Security update for python-PyYAML","description":"python-PyYAML was updated to fix one security issue which could have allowed an attacker to cause a denial of service by supplying specially crafted strings\n\nThe following issue was fixed:\n- #921588: python-PyYAML: assert failure when processing wrapped strings (equivalent to CVE-2014-9130 in LibYAML) \n","status":"published","published":"2015-03-12T10:18:36Z","modified":"2026-02-04T04:15:04.288006Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0925-2","title":"Security update for python-PyYAML","description":"python-PyYAML was updated to fix one security issue which could have allowed an attacker to cause a denial of service by supplying specially crafted strings\n\nThe following issue was fixed:\n- #921588: python-PyYAML: assert failure when processing wrapped strings (equivalent to CVE-2014-9130 in LibYAML) \n","status":"published","published":"2015-03-12T10:18:35Z","modified":"2026-02-04T03:35:46.733132Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0953-1","title":"Security update for perl-YAML-LibYAML","description":"perl-YAML-LibYAML was updated to fix three security issues.\n\nThese security issues were fixed:\n- CVE-2013-6393: The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performed an incorrect cast, which allowed remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggered a heap-based buffer overflow (bnc#860617, bnc#911782).\n- CVE-2014-9130: scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allowed context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping (bnc#907809, bnc#911782).\n- CVE-2014-2525: Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allowed context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file (bnc#868944, bnc#911782).\n  ","status":"published","published":"2015-02-10T14:18:22Z","modified":"2026-02-04T03:53:54.60437Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0953-2","title":"Security update for perl-YAML-LibYAML","description":"perl-YAML-LibYAML was updated to fix three security issues.\n\nThese security issues were fixed:\n- CVE-2013-6393: The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performed an incorrect cast, which allowed remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggered a heap-based buffer overflow (bnc#860617, bnc#911782).\n- CVE-2014-9130: scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allowed context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping (bnc#907809, bnc#911782).\n- CVE-2014-2525: Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allowed context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file (bnc#868944, bnc#911782).\n  ","status":"published","published":"2015-02-10T14:18:22Z","modified":"2026-02-04T02:42:09.267279Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-9130","description":"scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.","status":"published","published":"2014-12-08T00:00:00Z","modified":"2026-04-22T09:54:56.417228Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2461-1","title":"libyaml vulnerability","description":"Stanisław Pitucha and Jonathan Gray discovered that LibYAML did not\nproperly handle wrapped strings. An attacker could create specially\ncrafted YAML data to trigger an assert, causing a denial of service.\n","status":"published","published":"2015-01-12T22:24:49Z","modified":"2026-04-22T09:06:24.754681Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-2461-2","title":"libyaml-libyaml-perl vulnerability","description":"Stanisław Pitucha and Jonathan Gray discovered that\nlibyaml-libyaml-perl did not properly handle wrapped strings. An\nattacker could create specially crafted YAML data to trigger an assert,\ncausing a denial of service.\n","status":"published","published":"2015-01-12T22:25:45Z","modified":"2026-02-10T04:40:51Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-2461-3","title":"pyyaml vulnerability","description":"Stanisław Pitucha and Jonathan Gray discovered that PyYAML did not\nproperly handle wrapped strings. An attacker could create specially\ncrafted YAML data to trigger an assert, causing a denial of service.\n","status":"published","published":"2015-01-12T22:12:40Z","modified":"2026-02-10T04:40:51Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}