CVE-2017-18640: The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564

High severity · published Dec 12, 2019

CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564

7.5

CVSS

26.7%

EPSS

On KEV

Description

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)26.7% · higher than 98% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Fedora · Fedoraproject

31; 32 · source: NVD

Peoplesoft Enterprise PT Peopletools · Oracle

8.56; 8.57; 8.58 · source: NVD

Quarkus · Quarkus

through 1.3.4 · source: NVD

Snakeyaml · Snakeyaml Project

before 1.26 · source: NVD

Affected product

Fedora

Fedoraproject

All Fedora CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2017-18640

CVE.org

https://www.cve.org/CVERecord?id=CVE-2017-18640

Exploit

https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billion

Third Party Advisory

https://bitbucket.org/asomov/snakeyaml/wiki/Billion%20laughs%20attack

Exploit

https://bitbucket.org/snakeyaml/snakeyaml/issues/377

Release Notes

https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes

lists.apache.org

https://lists.apache.org/thread.html/r1058e7646988394de6a3fd0857ea9b1ee0de14d7bb28fee5ff782457%40%3Ccommits.atlas.apache.org%3E

lists.apache.org

https://lists.apache.org/thread.html/r154090b871cf96d985b90864442d84eb027c72c94bc3f0a5727ba2d1%40%3Ccommon-issues.hadoop.apache.org%3E