CVE-2022-3064

Excessive resource consumption in gopkg.in/yaml.v2

Résumé

La description telle que publiée par la source (souvent en anglais).

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Go gopkg.in/yaml.v2

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.2.4"}]}]

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2022-3064 golang-yaml.v2 Corrigé dans: 2.2.8-1
Ubuntu UBUNTU-CVE-2022-3064 golang-yaml.v2 Corrigé dans: 0.0+git20160301.0.a83829b-1ubuntu0.1~esm1

CWE-400