HTTP: LibYAML Scanner yaml_parser_scan_uri_escapes Heap Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the LibYAML Scanner. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.

Affected Products

Opensuse opensuse

References

CVE: CVE-2014-2525

Short Name

HTTP:OVERFLOW:LIBYAML-SCANNER

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: LibYAML Scanner yaml_parser_scan_uri_escapes Heap Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?