9.1
Critique
CVE-2026-4177 YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity…
Description
YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on trailing newlines. strtok mutated n->type_id in place, corrupting shared node data. A memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Versions non publiées | |
| Red Hat Enterprise Linux CRB (v. 8) | Versions non publiées | |
| Red Hat Enterprise Linux 6 | Versions non publiées | |
| YAML::Syck 1.36 | premières → 1.36 | Pas de correctif indiqué |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions non publiées | |
| Red Hat Enterprise Linux 8 | Versions non publiées |
Références
- github.com github.com
- metacpan.org metacpan.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Enterprise Linux Server Optional (v. 7 ELS)
Les 113 CVE de Red Hat Enterprise Linux Server Optional (v. 7 ELS) →
CVE-2026-56379
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows…
9.2
Critique
CVE-2026-11774
389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow
7.6
Élevée
CVE-2026-53460
ImageMagick is free and open-source software used for editing and manipulating digital images
7.5
Élevée
CVE-2026-49218
ImageMagick is free and open-source software used for editing and manipulating digital images
7.5
Élevée