CVE-2024-3205

NameCVE-2024-3205
DescriptionA vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function yaml_emitter_emit_flow_sequence_item of the file /src/libyaml/src/emitter.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259052. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Notes

Non issue reported for libyaml:
https://github.com/yaml/libyaml/issues/258#issuecomment-2058613931
https://vuldb.com/?submit.304561
https://github.com/yaml/libyaml/issues/289

Search for package or bug name: Reporting problems