Search for packages
| purl | pkg:deb/debian/libyaml-libyaml-perl@0.33-1%2Bsqueeze4 |
| Next non-vulnerable version | 0.41-6 |
| Latest non-vulnerable version | 0.86+ds-1+deb12u1 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2gya-adz6-2qgf
Aliases: CVE-2012-1152 |
Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) module 0.38 for Perl allow remote attackers to cause a denial of service (process crash) via format string specifiers in a (1) YAML stream to the Load function, (2) YAML node to the load_node function, (3) YAML mapping to the load_mapping function, or (4) YAML sequence to the load_sequence function. |
Affected by 3 other vulnerabilities. |
|
VCID-ft98-s9x5-byev
Aliases: CVE-2013-6393 GHSA-m75h-cghq-c8h5 |
LibYAML, the library that libyaml provides bindings for is vulnerable to a heap-based buffer overflow when parsing YAML tags. |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-pkg9-61ah-kbex
Aliases: CVE-2014-2525 GHSA-rffm-7xqq-h2v6 OSV-105027 |
security update |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-rj4z-edkc-pbdw
Aliases: CVE-2014-9130 |
security update |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||