Catalogo CVE
CVE-2012-1152
libyaml-libyaml-perl: CVE-2012-1152
- Gravità
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 2.43% · Oct 22, 2026
Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) module 0.38 for Perl allow remote attackers to cause a denial of service (process crash) via format string specifiers in a (1) YAML stream to the Load function, (2) YAML node to the load_node function, (3) YAML mapping to the load_mapping function, or (4) YAML sequence to the load_sequence function.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | libyaml-libyaml-perl | sid | 0.910.0+ds-1 | fixed |
| Debian | libyaml-libyaml-perl | forky | 0.910.0+ds-1 | fixed |
| Debian | libyaml-libyaml-perl | trixie | 0.903.0+ds-1 | fixed |
| Debian | libyaml-libyaml-perl | bookworm | 0.86+ds-1+deb12u1 | fixed |
| Opensuse | perl-YAML-LibYAML | tumbleweed | 0.59-2.11 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | libyaml-libyaml-perl | source | sid | 0.38-2 | not yet assigned | Not reported | [661548] |
| Debian | libyaml-libyaml-perl | source | forky | 0.38-2 | not yet assigned | Not reported | [661548] |
| Debian | libyaml-libyaml-perl | source | trixie | 0.38-2 | not yet assigned | Not reported | [661548] |
| Debian | libyaml-libyaml-perl | source | bookworm | 0.38-2 | not yet assigned | Not reported | [661548] |
| Opensuse | perl-YAML-LibYAML | rpm | tumbleweed | 0.59-2.11 | Not reported | OPENSUSE-SU-2024:10520-1 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [libyaml-libyaml-perl]Corretta
Dettagli (2)
0.86+ds-1+deb12u1· amd64 · bookwormCorretta · Corretta:
0.38-2dsa · libyaml-libyaml-perl · debian · bookworm; dsa · libyaml-libyaml-perl · debian · 12
0.86+ds-1+deb12u1· arm64 · bookwormCorretta · Corretta:
0.38-2dsa · libyaml-libyaml-perl · debian · bookworm; dsa · libyaml-libyaml-perl · debian · 12
[Debian 13 (Trixie)]
- [libyaml-libyaml-perl]Corretta
Dettagli (2)
0.903.0+ds-1· amd64 · trixieCorretta · Corretta:
0.38-2dsa · libyaml-libyaml-perl · debian · 13
0.903.0+ds-1· arm64 · trixieCorretta · Corretta:
0.38-2dsa · libyaml-libyaml-perl · debian · 13
[openSUSE Tumbleweed]
- [perl-YAML-LibYAML]Corretta
Pacchetto sorgente: [perl-YAML-LibYAML]
Dettagli (1)
0.910.0-1.3· x86_64 · tumbleweedCorretta · Corretta:
0.59-2.11dsa · perl-YAML-LibYAML · opensuse · tumbleweed
Osservato: