CVE-2022-3064
EUVD-2022-753727.12.2022, 22:15
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| yaml_project | yaml | 𝑥 < 2.2.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang-github-coreos-discovery-etcd-io |
| ||||||||||||||||||
| golang-gopkg-yaml.v3 |
| ||||||||||||||||||
| golang-yaml.v2 |
| ||||||||||||||||||
| kubernetes |
| ||||||||||||||||||
| singularity-container |
| ||||||||||||||||||
| webhook |
|
References