CVE:CVE-2017-18640
CNNVD:CNNVD-201912-569
SnakeYAML是一款基于Java的YAML解析器。
SnakeYAML 1.18版本中的Alias功能存在安全漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade snakeyaml_project snakeyaml to a higher version than 1.26,and avoid the version (,1.26); Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade quarkus quarkus to a higher version than 1.3.4,and avoid the version (,1.3.4]; Upgrade oracle peoplesoft_enterprise_pt_peopletools to a higher version than 8.56,8.57,8.58,and avoid the version 8.56,8.57,8.58