9.1
Critical
CVE-2026-4177 YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity…
Description
YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on trailing newlines. strtok mutated n->type_id in place, corrupting shared node data. A memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Versions not published | |
| Red Hat Enterprise Linux CRB (v. 8) | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| YAML::Syck 1.36 | earliest → 1.36 | No fix stated |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published |
References
- github.com github.com
- metacpan.org metacpan.org
Timeline
- Published
- Last modified
Other CVEs of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
The 113 CVEs of Red Hat Enterprise Linux Server Optional (v. 7 ELS) →
CVE-2026-56379
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows…
9.2
Critical
CVE-2026-11774
389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow
7.6
High
CVE-2026-53460
ImageMagick is free and open-source software used for editing and manipulating digital images
7.5
High
CVE-2026-49218
ImageMagick is free and open-source software used for editing and manipulating digital images
7.5
High