CVE-2017-18640

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-18640
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-18640.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-18640
Aliases
Downstream
CGA (180)
CLEANSTART (1)
CLSA (1)
DEBIAN (1)
openSUSE (3)
RHSA (1)
RLSA (1)
ROOT (1)
SUSE (3)
UBUNTU (1)
Related
ALSA (1)
openSUSE (3)
SUSE (3)
Published
2019-12-12T03:15:10Z
Modified
2026-07-08T05:50:04Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "31"
                },
                {
                    "last_affected":  "31"
                },
                {
                    "introduced":  "32"
                },
                {
                    "last_affected":  "32"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "fedoraproject:fedora"
        },
        {
            "cpes":  [
                "cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.56:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.57:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.58:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "8.56"
                },
                {
                    "last_affected":  "8.56"
                },
                {
                    "introduced":  "8.57"
                },
                {
                    "last_affected":  "8.57"
                },
                {
                    "introduced":  "8.58"
                },
                {
                    "last_affected":  "8.58"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "oracle:peoplesoft_enterprise_pt_peopletools"
        }
    ]
}
References

Affected packages

Git / bitbucket.org/snakeyaml/snakeyaml

Affected ranges

Type
GIT
Repo
https://bitbucket.org/snakeyaml/snakeyaml
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e91772b1bc0bc67e4fb60e4c19a1a7ba0a180896
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "1.26"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

1.*
1.6rc2
snakeyaml-1.*
snakeyaml-1.19
snakeyaml-1.20
snakeyaml-1.21
snakeyaml-1.22
snakeyaml-1.23
snakeyaml-1.24
snakeyaml-1.25
v1.*
v1.1
v1.10
v1.11
v1.12
v1.13
v1.15
v1.16
v1.17
v1.18
v1.2
v1.3
v1.4rc1
v1.5
v1.5rc1
v1.6
v1.6rc1
v1.7
v1.7rc1
v1.8
v1.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-18640.json"

Git / github.com/quarkusio/quarkus

Affected ranges

Type
GIT
Repo
https://github.com/quarkusio/quarkus
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
a58bf5b723a9a9389f6b12d020814242620dbcca
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "1.3.4"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

1.*
1.3.4.Final

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-18640.json"