CVE Feed

Dashboard / CVE / CVE-2014-2525

CVE-2014-2525

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.

Published:Mar 27, 2014

Last Modified:Apr 12, 2025

EPS:Mar 28, 2014

EPSS Score:0.55324

CVSS Score:6.8

Affected Products

Vendor

Product

Action

Vendor

Opensuse

Product

Leap

Opensuse

Leap

Vendor

Opensuse

Product

Opensuse

Opensuse

Opensuse

Vendor

Pyyaml

Product

Libyaml

Pyyaml

Libyaml

Vendor

Redhat

Product

Openstack

Redhat

Openstack

Vendor

Redhat

Product

Rhel Common

Redhat

Rhel Common

Vendor

Redhat

Product

Rhel Software Collections

Redhat

Rhel Software Collections

Exploits

https://bitbucket.org/xi/libyaml/commits/bce8b60f0b9af69fa9fab3093d0a41ba243de048 https://bitbucket.org/xi/libyaml/commits/bce8b60f0b9af69fa9fab3093d0a41ba243de048

Common Weakness Enumeration

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-122 Heap-based Buffer Overflow

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-10 Buffer Overflow via Environment Variables

CAPEC-100 Overflow Buffers

CAPEC-123 Buffer Manipulation

CAPEC-14 Client-side Injection-induced Buffer Overflow

CAPEC-24 Filter Failure through Buffer Overflow

CAPEC-42 MIME Conversion

CAPEC-44 Overflow Binary Resource File

CAPEC-45 Buffer Overflow via Symbolic Links

CAPEC-46 Overflow Variables and Tags

CAPEC-47 Buffer Overflow via Parameter Expansion

CAPEC-8 Buffer Overflow in an API Call

CAPEC-9 Buffer Overflow in Local Command-Line Utilities

CAPEC-92 Forced Integer Overflow

Related CVEs

CVE-2026-31431 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating …

CVE-2025-32463 (CVSS 9.3) — Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlle…

CVE-2023-32182 (CVSS 5.9) — A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise D…

CVE-2022-45153 (CVSS 7) — An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for…

CVE-2023-22643 (CVSS 6.3) — An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in…

CVE-2022-31254 (CVSS 7.8) — A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server…

CVE-2022-31252 (CVSS 4.4) — A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3,…

CVE-2021-46141 (CVSS 5.5) — An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers an…

CVE-2021-46142 (CVSS 5.5) — An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.…

CVE-2021-41819 (CVSS 7.5) — CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CG…

References

http://advisories.mageia.org/MGASA-2014-0150.html

http://lists.opensuse.org/opensuse-updates/2014-04/msg00022.html

http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html

http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html

http://rhn.redhat.com/errata/RHSA-2014-0353.html

http://rhn.redhat.com/errata/RHSA-2014-0354.html

http://rhn.redhat.com/errata/RHSA-2014-0355.html

http://secunia.com/advisories/57836

http://secunia.com/advisories/57966

http://secunia.com/advisories/57968

http://support.apple.com/kb/HT6443

http://www.debian.org/security/2014/dsa-2884

http://www.debian.org/security/2014/dsa-2885

http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/

http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/

http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/

http://www.mandriva.com/security/advisories?name=MDVSA-2015:060

http://www.ocert.org/advisories/ocert-2014-003.html

http://www.securityfocus.com/bid/66478

http://www.ubuntu.com/usn/USN-2160-1

https://bitbucket.org/xi/libyaml/commits/bce8b60f0b9af69fa9fab3093d0a41ba243de048

https://puppet.com/security/cve/cve-2014-2525

http://advisories.mageia.org/MGASA-2014-0150.html

http://lists.opensuse.org/opensuse-updates/2014-04/msg00022.html

http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html

http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html

http://rhn.redhat.com/errata/RHSA-2014-0353.html

http://rhn.redhat.com/errata/RHSA-2014-0354.html

http://rhn.redhat.com/errata/RHSA-2014-0355.html

http://secunia.com/advisories/57836

http://secunia.com/advisories/57966

http://secunia.com/advisories/57968

http://support.apple.com/kb/HT6443

http://www.debian.org/security/2014/dsa-2884

http://www.debian.org/security/2014/dsa-2885

http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/

http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/

http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/

http://www.mandriva.com/security/advisories?name=MDVSA-2015:060

http://www.ocert.org/advisories/ocert-2014-003.html

http://www.securityfocus.com/bid/66478

http://www.ubuntu.com/usn/USN-2160-1

https://bitbucket.org/xi/libyaml/commits/bce8b60f0b9af69fa9fab3093d0a41ba243de048

https://puppet.com/security/cve/cve-2014-2525

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High