Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2014-9130 Details

Description

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://advisories.mageia.org/MGASA-2014-0508.html	CVE
http://linux.oracle.com/errata/ELSA-2015-0100.html	CVE
http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html	CVE
http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html	CVE
http://rhn.redhat.com/errata/RHSA-2015-0100.html	CVE
http://rhn.redhat.com/errata/RHSA-2015-0112.html	CVE
http://rhn.redhat.com/errata/RHSA-2015-0260.html	CVE
https://bitbucket.org/xi/libyaml/commits/2b9156756423e967cfd09a61d125d883fca6f4f2	CVE	Exploit
https://bitbucket.org/xi/libyaml/issue/10/wrapped-strings-cause-assert-failure	CVE	Exploit
http://secunia.com/advisories/59947	CVE
http://secunia.com/advisories/60944	CVE
http://secunia.com/advisories/62164	CVE
http://secunia.com/advisories/62174	CVE
http://secunia.com/advisories/62176	CVE
http://secunia.com/advisories/62705	CVE
http://secunia.com/advisories/62723	CVE
http://secunia.com/advisories/62774	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/99047	CVE
https://puppet.com/security/cve/cve-2014-9130	CVE
http://www.debian.org/security/2014/dsa-3102	CVE
http://www.debian.org/security/2014/dsa-3103	CVE
http://www.debian.org/security/2014/dsa-3115	CVE
http://www.mandriva.com/security/advisories?name=MDVSA-2014:242	CVE
http://www.mandriva.com/security/advisories?name=MDVSA-2015:060	CVE
http://www.openwall.com/lists/oss-security/2014/11/28/1	CVE	Exploit
http://www.openwall.com/lists/oss-security/2014/11/28/8	CVE
http://www.openwall.com/lists/oss-security/2014/11/29/3	CVE
http://www.securityfocus.com/bid/71349	CVE
http://www.ubuntu.com/usn/USN-2461-1	CVE
http://www.ubuntu.com/usn/USN-2461-2	CVE
http://www.ubuntu.com/usn/USN-2461-3	CVE
http://advisories.mageia.org/MGASA-2014-0508.html	[email protected]
http://linux.oracle.com/errata/ELSA-2015-0100.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2015-0100.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2015-0112.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2015-0260.html	[email protected]
https://bitbucket.org/xi/libyaml/commits/2b9156756423e967cfd09a61d125d883fca6f4f2	[email protected]	Exploit
https://bitbucket.org/xi/libyaml/issue/10/wrapped-strings-cause-assert-failure	[email protected]	Exploit
http://secunia.com/advisories/59947	[email protected]
http://secunia.com/advisories/60944	[email protected]
http://secunia.com/advisories/62164	[email protected]
http://secunia.com/advisories/62174	[email protected]
http://secunia.com/advisories/62176	[email protected]
http://secunia.com/advisories/62705	[email protected]
http://secunia.com/advisories/62723	[email protected]
http://secunia.com/advisories/62774	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/99047	[email protected]
https://puppet.com/security/cve/cve-2014-9130	[email protected]
http://www.debian.org/security/2014/dsa-3102	[email protected]
http://www.debian.org/security/2014/dsa-3103	[email protected]
http://www.debian.org/security/2014/dsa-3115	[email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2014:242	[email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2015:060	[email protected]
http://www.openwall.com/lists/oss-security/2014/11/28/1	[email protected]	Exploit
http://www.openwall.com/lists/oss-security/2014/11/28/8	[email protected]
http://www.openwall.com/lists/oss-security/2014/11/29/3	[email protected]
http://www.securityfocus.com/bid/71349	[email protected]
http://www.ubuntu.com/usn/USN-2461-1	[email protected]
http://www.ubuntu.com/usn/USN-2461-2	[email protected]
http://www.ubuntu.com/usn/USN-2461-3	[email protected]

see all 62 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]

Affected Products

Product	Versions
pyyaml libyaml	0.1.5 0.1.6
CPE cpe:2.3:a:pyyaml:libyaml:0.1.5:::::::* cpe:2.3:a:pyyaml:libyaml:0.1.6:::::::* Remediation No remediation found in references.

Change History

14 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
May 6, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Dec 9, 2017	CVE Modified	[email protected]
Sep 8, 2017	CVE Modified	[email protected]
Jan 3, 2017	CVE Modified	[email protected]
Jul 29, 2016	CVE Modified	[email protected]
Mar 26, 2015	CVE Modified	[email protected]
Mar 18, 2015	CVE Modified	[email protected]
Feb 27, 2015	CVE Modified	[email protected]
Feb 24, 2015	CVE Modified	[email protected]
Feb 6, 2015	CVE Modified	[email protected]
Dec 9, 2014	Initial Analysis	[email protected]