Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat AMQ Streams 1.8.0 | |||
| prometheus-jmx-exporter | cpe:/a:redhat:amq_streams:1 | RHSA-2021:3225 | 2021-08-19T00:00:00Z |
| Red Hat build of Quarkus 1.3.4 | |||
| snakeyaml | cpe:/a:redhat:openshift_application_runtimes:1.0 | RHSA-2020:2603 | 2020-06-17T00:00:00Z |
| Red Hat Enterprise Linux 8 | |||
| prometheus-jmx-exporter-0:0.12.0-6.el8 | cpe:/a:redhat:enterprise_linux:8 | RHSA-2020:4807 | 2020-11-04T00:00:00Z |
| Red Hat Fuse 7.9 | |||
| prometheus-jmx-exporter | cpe:/a:redhat:jboss_fuse:7 | RHSA-2021:3140 | 2021-08-11T00:00:00Z |
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2021-1404 | The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564. |
 Github GHSA |
GHSA-rvwf-54qp-4r6v | SnakeYAML Entity Expansion during load operation |
 Ubuntu USN |
USN-7368-1 | SnakeYAML vulnerability |
No history.
Subscriptions
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T21:28:55.802Z
Reserved: 2019-12-12T00:00:00.000Z
Link: CVE-2017-18640
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-12-12T03:15:10.850
Modified: 2024-11-21T03:20:32.813
Link: CVE-2017-18640
Redhat
OpenCVE Enrichment
No data.