The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1073-1 advisory.

    - CVE-2018-20573: Fixed remote DOS via a crafted YAML file in function Scanner:EnsureTokensInQueue     (bsc#1121227).
    - CVE-2018-20574: Fixed remote DOS via a crafted YAML file in function SingleDocParser:HandleFlowMap     (bsc#1121230).
    - CVE-2019-6285: Fixed remote DOS via a crafted YAML file in function SingleDocParser::HandleFlowSequence     (bsc#1122004).
    - CVE-2019-6292: Fixed DOS by stack consumption in singledocparser.cpp (bsc#1122021).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to     cause a denial of service (stack consumption and application crash) via a crafted YAML file.
    (CVE-2018-20574)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:1073-1 advisory.

  - The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to     cause a denial of service (stack consumption and application crash) via a crafted YAML file.
    (CVE-2018-20573)

  - The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to     cause a denial of service (stack consumption and application crash) via a crafted YAML file.
    (CVE-2018-20574)

  - The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote     attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
    (CVE-2019-6285)

  - An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion     occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack     frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote attackers     could leverage this vulnerability to cause a denial-of-service via a cpp file. (CVE-2019-6292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1072-1 advisory.

    - CVE-2018-20573: Fixed remote DOS via a crafted YAML file in function Scanner:EnsureTokensInQueue     (bsc#1121227).
    - CVE-2018-20574: Fixed remote DOS via a crafted YAML file in function SingleDocParser:HandleFlowMap     (bsc#1121230).
    - CVE-2019-6285: Fixed remote DOS via a crafted YAML file in function SingleDocParser::HandleFlowSequence     (bsc#1122004).
    - CVE-2019-6292: Fixed DOS by stack consumption in singledocparser.cpp (bsc#1122021).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1740-3 advisory.

    - CVE-2018-20573: Fixed remote DOS via a crafted YAML file in function Scanner:EnsureTokensInQueue     (bsc#1121227).
    - CVE-2018-20574: Fixed remote DOS via a crafted YAML file in function SingleDocParser:HandleFlowMap     (bsc#1121230).
    - CVE-2019-6285: Fixed remote DOS via a crafted YAML file in function SingleDocParser::HandleFlowSequence     (bsc#1122004).
    - CVE-2019-6292: Fixed DOS by stack consumption in singledocparser.cpp (bsc#1122021).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
159479	SUSE SLED15 / SLES15 Security Update : yaml-cpp (SUSE-SU-2022:1073-1)	Nessus	SuSE Local Security Checks	4/4/2022	6/26/2026	medium
256626	Linux Distros Unpatched Vulnerability : CVE-2018-20574	Nessus	Misc.	8/27/2025	7/27/2026	medium
159478	openSUSE 15 Security Update : yaml-cpp (openSUSE-SU-2022:1073-1)	Nessus	SuSE Local Security Checks	4/4/2022	11/3/2023	medium
159476	SUSE SLED12 / SLES12 Security Update : yaml-cpp (SUSE-SU-2022:1072-1)	Nessus	SuSE Local Security Checks	4/4/2022	6/26/2026	medium
173825	SUSE SLES15 Security Update : yaml-cpp (SUSE-SU-2023:1740-3)	Nessus	SuSE Local Security Checks	4/4/2023	6/25/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium