Vulnerability Details : CVE-2022-38750
Potential exploit
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
Vulnerability category: Memory CorruptionDenial of service
Products affected by CVE-2022-38750
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-38750
0.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 37 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-38750
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
2.8
|
3.6
|
Google Inc. | |
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2022-38750
-
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).Assigned by: cve-coordination@google.com (Secondary)
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2022-38750
-
https://security.netapp.com/advisory/ntap-20240315-0010/
SnakeYAML 1.31 Vulnerabilities in NetApp Products | NetApp Product Security
-
https://security.gentoo.org/glsa/202305-28
snakeyaml: Multiple Vulnerabilities (GLSA 202305-28) — Gentoo security
-
https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027
snakeyaml / snakeyaml / issues / #526 - Stackoverflow [OSS-Fuzz - 47027] — BitbucketExploit;Issue Tracking;Third Party Advisory
-
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
[SECURITY] [DLA 3132-1] snakeyaml security updateMailing List;Third Party Advisory
-
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027
47027 - snakeyaml:YamlFuzzer: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject - oss-fuzzExploit;Issue Tracking;Mailing List;Third Party Advisory
Jump to