CVE-2017-18640

HIGH LAB

SnakeYAML <1.26 - Entity Expansion

Title source: llm

Description

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

Exploits (2)

nomisec WORKING POC

by dawetmaster · poc

https://github.com/dawetmaster/CVE-2017-18640-snakeyaml-vulnerable

View Code ZIP pw:eip

nomisec WORKING POC

by andikahilmy · poc

https://github.com/andikahilmy/CVE-2017-18640-snakeyaml-vulnerable

View Code ZIP pw:eip

References (59)

[Exploit, Issue Tracking, Patch, Third Party Advisory] https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billion

[Third Party Advisory] https://bitbucket.org/asomov/snakeyaml/wiki/Billion%20laughs%20attack

[Exploit, Issue Tracking, Third Party Advisory] https://bitbucket.org/snakeyaml/snakeyaml/issues/377

[Release Notes, Third Party Advisory] https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes

[Mailing List] https://lists.apache.org/thread.html/rb34d8d3269ad47a1400f5a1a2d8310e13a80b6576ebd7f512144198d%40%3Ccommon-dev.hadoop.apache.org%3E

[Mailing List] https://lists.apache.org/thread.html/rb5c33d0069c927fae16084f0605895b98d231d7c48527bcb822ac48c%40%3Ccommits.cassandra.apache.org%3E

[Third Party Advisory] https://mvnrepository.com/artifact/org.yaml/snakeyaml/1.25/usages

[Patch, Third Party Advisory] https://www.oracle.com/security-alerts/cpuApr2021.html

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKN7VGIKTYBCAKYBRG55QHXAY5UDZ7HA/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTVJC54XGX26UJVVYCXZ7D25X3R5T2G6/

[Third Party Advisory] https://security.gentoo.org/glsa/202305-28

[Mailing List] https://lists.apache.org/thread.html/r1058e7646988394de6a3fd0857ea9b1ee0de14d7bb28fee5ff782457%40%3Ccommits.atlas.apache.org%3E

[Mailing List] https://lists.apache.org/thread.html/r154090b871cf96d985b90864442d84eb027c72c94bc3f0a5727ba2d1%40%3Ccommon-issues.hadoop.apache.org%3E

[Mailing List] https://lists.apache.org/thread.html/r16ae4e529401b75a1f5aa462b272b31bf2a108236f882f06fddc14bc%40%3Ccommon-issues.hadoop.apache.org%3E

[Mailing List] https://lists.apache.org/thread.html/r1703a402f30c8a2ee409f8c6f393e95a63f8c952cc9ee5bf9dd586dc%40%3Ccommits.cassandra.apache.org%3E

[Mailing List] https://lists.apache.org/thread.html/r182e9cf6f3fb22b9be0cac4ff0685199741d2ab6e9a4e27a3693c224%40%3Ccommon-issues.hadoop.apache.org%3E

[Mailing List] https://lists.apache.org/thread.html/r191ceadb1b883357384981848dfa5235cb02a90070c553afbaf9b3d9%40%3Ccommits.cassandra.apache.org%3E

[Mailing List] https://lists.apache.org/thread.html/r1aab47b48a757c70e40fc0bcb1fcf1a3951afa6a17aee7cd66cf79f8%40%3Ccommon-commits.hadoop.apache.org%3E

[Mailing List] https://lists.apache.org/thread.html/r1dfac8b6a7097bcb4979402bbb6e2f8c36d0d9001e3018717eb22b7e%40%3Cdev.atlas.apache.org%3E

[Mailing List] https://lists.apache.org/thread.html/r1ffce2ed3017e9964f03ad2c539d69e49144fc8e9bf772d641612f98%40%3Ccommits.cassandra.apache.org%3E

... and 39 more

Scores

CVSS v3 7.5

EPSS 0.0217

EPSS Percentile 84.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Lab Environment

COMMUNITY

Community Lab

docker pull java:6

docker pull java:7

docker pull java:8

https://github.com/andikahilmy/CVE-2017-18640-snakeyaml-vulnerable

https://github.com/dawetmaster/CVE-2017-18640-snakeyaml-vulnerable

View in Library

Details

CWE

CWE-776

Status published

Products (8)

fedoraproject/fedora 31

fedoraproject/fedora 32

oracle/peoplesoft_enterprise_pt_peopletools 8.56

oracle/peoplesoft_enterprise_pt_peopletools 8.57

oracle/peoplesoft_enterprise_pt_peopletools 8.58

org.yaml/snakeyaml 0 - 1.26Maven

quarkus/quarkus < 1.3.4

snakeyaml_project/snakeyaml < 1.26

Published Dec 12, 2019

Tracked Since Feb 18, 2026