What is CVE-2017-18640?

CVE-2017-18640 is a high-severity software vulnerability (CWE-776) with a CVSS score of 7.5. The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

Is CVE-2017-18640 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 27%.

What products does CVE-2017-18640 affect?

Tracked products affected include Fedora, Quarkus. Check the version you run to see whether it is affected.

How do I fix CVE-2017-18640?

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

← All products

CVE-2017-18640

HIGH severity · CVSS 7.5 · CWE-776

7.5CVSS HIGH

Summary

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

Confidentiality impactNone

Integrity impactNone

Availability impactHigh

Exploit probability (EPSS)27%

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products we track (2)

Fedora Quarkus

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billion ↗

Additional information

NVD record
https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billionPatch
https://bitbucket.org/asomov/snakeyaml/wiki/Billion%20laughs%20attackAdvisory
https://bitbucket.org/snakeyaml/snakeyaml/wiki/ChangesAdvisory
https://lists.apache.org/thread.html/r1058e7646988394de6a3fd0857ea9b1ee0de14d7bb28fee5ff782457%40%3Ccommits.atlas.apache.org%3E
https://lists.apache.org/thread.html/r154090b871cf96d985b90864442d84eb027c72c94bc3f0a5727ba2d1%40%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r16ae4e529401b75a1f5aa462b272b31bf2a108236f882f06fddc14bc%40%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r1703a402f30c8a2ee409f8c6f393e95a63f8c952cc9ee5bf9dd586dc%40%3Ccommits.cassandra.apache.org%3E
https://bitbucket.org/snakeyaml/snakeyaml/issues/377Advisory