CVE Vulnerabilities

CVE-2021-4235

Published: Dec 27, 2022 | Modified: Jul 06, 2023
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.

Affected Software

Name Vendor Start Version End Version
Yaml Yaml_project * 2.2.3 (excluding)

References