CVE-2024-35326

libyaml: double-free in yaml_emitter_emit in /src/libyaml/src/emitter.c

Published Jun 13, 2024 CVSS 3.1 · 6.5 Medium EPSS n/a KEV · Not listed

Description

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Affected Products

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35326.c
https://nvd.nist.gov/vuln/detail/CVE-2024-35326
https://www.cve.org/CVERecord?id=CVE-2024-35326

History

Aug 28, 2024 4:45 PM Weaknesses updated. Affected versions updated. Affected vendors updated. References updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses	CWE-787
CPEs	cpe:2.3:a:pyyaml:libyaml:0.2.5:::::::*
Vendors & Products	Pyyaml Pyyaml libyaml
References	https://github.com/idhyt/pocs/tree/main/libyaml https://github.com/yaml/libyaml/issues/298 https://github.com/yaml/libyaml/issues/302
Metrics	cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`	cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

Aug 28, 2024 3:45 PM Description updated View changes

Type	Values Removed	Values Added
Description	libyaml v0.2.5 is vulnerable to Buffer Overflow. Affected by this issue is the function yaml_emitter_emit of the file /src/libyaml/src/emitter.c. The manipulation leads to a double-free. NOTE: this is disputed by the supplier because the discoverer's sample C code is incorrect: it does not call all of the required _initialize functions that are described in the LibYAML documentation.	DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Aug 28, 2024 3:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Aug 28, 2024 2:45 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description	libyaml v0.2.5 is vulnerable to Buffer Overflow. Affected by this issue is the function yaml_emitter_emit of the file /src/libyaml/src/emitter.c. The manipulation leads to a double-free.	libyaml v0.2.5 is vulnerable to Buffer Overflow. Affected by this issue is the function yaml_emitter_emit of the file /src/libyaml/src/emitter.c. The manipulation leads to a double-free. NOTE: this is disputed by the supplier because the discoverer's sample C code is incorrect: it does not call all of the required _initialize functions that are described in the LibYAML documentation.
References		https://github.com/yaml/libyaml/issues/298 https://github.com/yaml/libyaml/issues/302

Aug 28, 2024 2:30 PM Added references View changes

Type	Values Removed	Values Added
References		https://github.com/idhyt/pocs/tree/main/libyaml

Aug 6, 2024 5:15 PM First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Pyyaml Pyyaml libyaml
Weaknesses		CWE-787
CPEs		cpe:2.3:a:pyyaml:libyaml:0.2.5:::::::*
Vendors & Products		Pyyaml Pyyaml libyaml
Metrics	cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`