CVE:CVE-2020-1747
CNNVD:CNNVD-202003-034
PyYAML是一款基于Python的YAML解析器和生成器。
PyYAML 5.3.1之前版本中存在输入验证错误漏洞，该漏洞源于程序没有正确处理不受信任的YAML文件。攻击者可利用该漏洞在系统上执行任意代码。
solution:Upgrade pyyaml pyyaml to a higher version than 5.3.1,and avoid the version [5.1,5.3.1); Upgrade fedoraproject fedora to a higher version than 30,31,32,33,and avoid the version 30,31,32,33; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 22.1.0,and avoid the version 22.1.0