| { |
| "dataType": "CVE_RECORD", |
| "dataVersion": "5.0", |
| "cveMetadata": { |
| "cveId": "CVE-2022-3064" |
| }, |
| "containers": { |
| "cna": { |
| "providerMetadata": { |
| "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc" |
| }, |
| "title": "Excessive resource consumption in gopkg.in/yaml.v2", |
| "descriptions": [ |
| { |
| "lang": "en", |
| "value": "Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory." |
| } |
| ], |
| "affected": [ |
| { |
| "vendor": "gopkg.in/yaml.v2", |
| "product": "gopkg.in/yaml.v2", |
| "collectionURL": "https://pkg.go.dev", |
| "packageName": "gopkg.in/yaml.v2", |
| "versions": [ |
| { |
| "version": "0", |
| "lessThan": "2.2.4", |
| "status": "affected", |
| "versionType": "semver" |
| } |
| ], |
| "programRoutines": [ |
| { |
| "name": "decoder.unmarshal" |
| }, |
| { |
| "name": "yaml_parser_increase_flow_level" |
| }, |
| { |
| "name": "yaml_parser_roll_indent" |
| }, |
| { |
| "name": "Decoder.Decode" |
| }, |
| { |
| "name": "Unmarshal" |
| }, |
| { |
| "name": "UnmarshalStrict" |
| } |
| ], |
| "defaultStatus": "unaffected" |
| } |
| ], |
| "problemTypes": [ |
| { |
| "descriptions": [ |
| { |
| "lang": "en", |
| "description": "CWE 400: Uncontrolled Resource Consumption" |
| } |
| ] |
| } |
| ], |
| "references": [ |
| { |
| "url": "https://github.com/go-yaml/yaml/commit/f221b8435cfb71e54062f6c6e99e9ade30b124d5" |
| }, |
| { |
| "url": "https://github.com/go-yaml/yaml/releases/tag/v2.2.4" |
| }, |
| { |
| "url": "https://pkg.go.dev/vuln/GO-2022-0956" |
| }, |
| { |
| "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00001.html" |
| }, |
| { |
| "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/" |
| }, |
| { |
| "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SBIUECMLNC572P23DDOKJNKPJVX26SP/" |
| }, |
| { |
| "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PW3XC47AUW5J5M2ULJX7WCCL3B2ETLMT/" |
| }, |
| { |
| "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/" |
| }, |
| { |
| "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/" |
| }, |
| { |
| "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANIOPUXWIHVRA6CEWXCGOMX3YYS6KFHG/" |
| } |
| ] |
| } |
| } |
| } |
