Bug 1226348 - VUL-0: CVE-2024-35326: libyaml: libyaml: double-free in yaml_emitter_emit in /src/libyaml/src/emitter.c
Summary: VUL-0: CVE-2024-35326: libyaml: libyaml: double-free in yaml_emitter_emit in ...
Status: NEW
Alias: None
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Major
Target Milestone: ---
Assignee: Jordi Massaguer
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/410665/
Whiteboard:
Keywords:
Depends on:
Blocks: CVE-2024-35326
  Show dependency tree / graph
 
Reported: 2024-06-14 13:58 UTC by Camila Camargo de Matos
Modified: 2024-06-14 17:29 UTC (History)
3 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Camila Camargo de Matos 2024-06-14 13:58:25 UTC 
+++ This bug was initially created as a clone of Bug #1226340 +++

libyaml v0.2.5 is vulnerable to Buffer Overflow. Affected by this issue is the function yaml_emitter_emit of the file /src/libyaml/src/emitter.c. The manipulation leads to a double-free.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35326
https://www.cve.org/CVERecord?id=CVE-2024-35326
https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35326.c
https://bugzilla.redhat.com/show_bug.cgi?id=2292351
Comment 1 Camila Camargo de Matos 2024-06-14 17:20:08 UTC 
See bug #1226340 for a reference link which is the upstream GitHub issue where this possible vulnerability is being discussed.