NVD

Id
41451  
Name
CVE-2013-6393  
Description
The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-02-06  
Modified Date
2016-08-04  
Seq
2013-6393  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209415 41451 CVE-2013-6393 http://advisories.mageia.org/MGASA-2014-0040.html  View
209416 41451 CVE-2013-6393 APPLE-SA-2014-04-22-1  View
209417 41451 CVE-2013-6393 APPLE-SA-2014-10-16-3  View
209418 41451 CVE-2013-6393 openSUSE-SU-2014:0272  View
209419 41451 CVE-2013-6393 openSUSE-SU-2014:0273  View
209420 41451 CVE-2013-6393 openSUSE-SU-2015:0319  View
209421 41451 CVE-2013-6393 openSUSE-SU-2016:1067  View
209422 41451 CVE-2013-6393 RHSA-2014:0353  View
209423 41451 CVE-2013-6393 RHSA-2014:0354  View
209424 41451 CVE-2013-6393 RHSA-2014:0355  View
209425 41451 CVE-2013-6393 DSA-2850  View
209426 41451 CVE-2013-6393 DSA-2870  View
209427 41451 CVE-2013-6393 MDVSA-2015:060  View
209428 41451 CVE-2013-6393 65258  View
209429 41451 CVE-2013-6393 USN-2098-1  View
209430 41451 CVE-2013-6393 https://bitbucket.org/xi/libyaml/commits/tag/0.1.5  View
209431 41451 CVE-2013-6393 https://bugzilla.redhat.com/attachment.cgi?id=847926&action=diff  View
209432 41451 CVE-2013-6393 https://bugzilla.redhat.com/show_bug.cgi?id=1033990  View
209433 41451 CVE-2013-6393 https://support.apple.com/kb/HT6536  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24443 JVNDB-2013-006018 LibYAML の scanner.c の yaml_parser_scan_tag_uri 関数におけるサービス運用妨害 (DoS) の脆弱性 LibYAML の scanner.c の yaml_parser_scan_tag_uri 関数は、不正なキャストを実行するため、サービス運用妨害 (アプリケーションクラッシュ) 状態にされる、および任意のコードを実行される脆弱性が存在します。 CVE-2013-6393 66335 CVE-2013-6393 41451 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006018.html 2013-11-24 2015-08-07 View