Out-of-bounds write in Snakeyaml - CVE-2022-41854

Vulnerability identifier: #VU70524

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-41854

CWE-ID: CWE-787

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a boundary error when parsing untrusted YAML files. A remote attacker can send a specially crafted YAML file, trick the victim into opening it using the affected software, trigger out-of-bounds write and perform a denial of service attack.

Snakeyaml
IBM Business Automation Workflow
WebSphere Service Registry and Repository
Migration Toolkit for Runtimes
IBM Sterling B2B Integrator
Log Analysis
Netcool Operations Insight
QRadar User Behavior Analytics
IBM Watson Assistant for IBM Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Sterling Partner Engagement Manager
Red Hat Migration Toolkit for Applications
IBM Spectrum Symphony
IBM Maximo Application Suite
IBM MQ
IBM Cloud Pak for Business Automation
IBM Observability with Instana
AMQ Clients
Amazon Linux AMI
openEuler
Fedora
DB2 Warehouse on Cloud Pak for Data
DB2 on Cloud Pak for Data
IBM Watson Machine Learning Accelerator
Integration Designer
Db2 Graph
IBM i Modernization Engine for Lifecycle Integration
IBM Cloud Pak for Watson AIOps
Maximo Data Loader
Robotic Process Automation for Cloud Pak
Red Hat build of Eclipse Vert.x
Cloudera Data Platform Private Cloud Base for IBM
JBoss Enterprise Application Platform
Fuse
Red Hat Single Sign-On
IBM App Connect Enterprise
Red Hat Camel for Spring Boot
eap7-jboss-el (Red Hat package)
eap7-apache-mime4j (Red Hat package)
eap7-activemq-artemis-native (Red Hat package)
eap7-artemis-native (Red Hat package)
eap7-artemis-wildfly-integration (Red Hat package)
eap7-wildfly-http-client (Red Hat package)
eap7-ironjacamar (Red Hat package)
eap7-jboss-server-migration (Red Hat package)
snakeyaml
snakeyaml-javadoc
eap7-snakeyaml (Red Hat package)
eap7-undertow-jastow (Red Hat package)
eap7-undertow (Red Hat package)
eap7-picketlink-federation (Red Hat package)
eap7-jbossws-spi (Red Hat package)
eap7-resteasy (Red Hat package)
eap7-jboss-ejb-client (Red Hat package)
eap7-netty (Red Hat package)
eap7-netty-transport-native-epoll (Red Hat package)
picocli
eap7-jbossws-cxf (Red Hat package)
eap7-wildfly (Red Hat package)
eap7-infinispan (Red Hat package)
eap7-jboss-metadata (Red Hat package)
rh-sso7-keycloak (Red Hat package)
Voice Gateway
watsonx.data
IBM Case Manager
Operational Decision Manager
IBM Cognos Analytics
IBM DB2
IBM InfoSphere Information Server

Install updates from vendor's website.

Snakeyaml - update to 1.32
Migration Toolkit for Runtimes - update to 1.1.0
Red Hat build of Eclipse Vert.x - update to 4.3.7
IBM Sterling B2B Integrator - addressed in versions 6.0.3.9, 6.1.0.8, 6.1.2.3, 6.2.0.0
Cloudera Data Platform Private Cloud Base for IBM - addressed in versions 7.1.7 SP3, 7.1.9 SP1
JBoss Enterprise Application Platform - update to 7.4.10
Red Hat Single Sign-On - update to 7.6.3
eap7-jboss-el (Red Hat package) - addressed in versions api_3.0_spec-2.0.1-1.Final_redhat_00001.1.el7eap, api_3.0_spec-2.0.1-1.Final_redhat_00001.1.el8eap, api_3.0_spec-2.0.1-1.Final_redhat_00001.1.el9eap
eap7-apache-mime4j (Red Hat package) - addressed in versions 0.8.9-1.redhat_00001.1.el7eap, 0.8.9-1.redhat_00001.1.el8eap, 0.8.9-1.redhat_00001.1.el9eap
Db2 Graph - addressed in versions 1.0.0.1562-amd64, 1.0.0.1562-s390x, 1.0.0.1562-ppcle, 1.0.0.1598-amd64, 1.0.0.1598-s390x, 1.0.0.1598-ppcle
eap7-activemq-artemis-native (Red Hat package) - addressed in versions 1.0.2-3.redhat_00004.1.el7eap, 1.0.2-3.redhat_00004.1.el8eap, 1.0.2-3.redhat_00004.1.el9eap
eap7-artemis-native (Red Hat package) - addressed in versions 1.0.2-4.redhat_00004.1.el7eap, 1.0.2-4.redhat_00004.1.el8eap, 1.0.2-4.redhat_00004.1.el9eap
eap7-artemis-wildfly-integration (Red Hat package) - addressed in versions 1.0.7-1.redhat_00001.1.el7eap, 1.0.7-1.redhat_00001.1.el8eap, 1.0.7-1.redhat_00001.1.el9eap
Voice Gateway - addressed in versions 1.0.8.2, 1.0.8.6
eap7-wildfly-http-client (Red Hat package) - addressed in versions 1.1.16-1.Final_redhat_00002.1.el7eap, 1.1.16-1.Final_redhat_00002.1.el8eap, 1.1.16-1.Final_redhat_00002.1.el9eap
Log Analysis - update to 1.3.7.2 IF003A
IBM i Modernization Engine for Lifecycle Integration - update to 1.4.2
eap7-ironjacamar (Red Hat package) - addressed in versions 1.5.11-1.Final_redhat_00001.1.el7eap, 1.5.11-1.Final_redhat_00001.1.el8eap, 1.5.11-1.Final_redhat_00001.1.el9eap
Netcool Operations Insight - update to 1.6.9
eap7-jboss-server-migration (Red Hat package) - addressed in versions 1.10.0-26.Final_redhat_00025.1.el7eap, 1.10.0-26.Final_redhat_00025.1.el8eap, 1.10.0-26.Final_redhat_00025.1.el9eap
snakeyaml - update to 1.27-6
snakeyaml-javadoc - update to 1.32-1
snakeyaml - update to 1.32-1
snakeyaml - addressed in versions 1.32-1.fc36, 1.32-1.fc37
eap7-snakeyaml (Red Hat package) - addressed in versions 1.33.0-2.SP1_redhat_00001.1.el7eap, 1.33.0-2.SP1_redhat_00001.1.el8eap, 1.33.0-2.SP1_redhat_00001.1.el9eap
watsonx.data - update to 2.0
eap7-undertow-jastow (Red Hat package) - addressed in versions 2.0.14-1.Final_redhat_00001.1.el7eap, 2.0.14-1.Final_redhat_00001.1.el8eap, 2.0.14-1.Final_redhat_00001.1.el9eap
eap7-undertow (Red Hat package) - addressed in versions 2.2.23-1.SP2_redhat_00001.1.el7eap, 2.2.23-1.SP2_redhat_00001.1.el8eap, 2.2.23-1.SP2_redhat_00001.1.el9eap
eap7-picketlink-federation (Red Hat package) - addressed in versions 2.5.5-22.SP12_redhat_00012.1.el7eap, 2.5.5-22.SP12_redhat_00012.1.el8eap, 2.5.5-22.SP12_redhat_00012.1.el9eap
eap7-jbossws-spi (Red Hat package) - addressed in versions 3.4.0-2.Final_redhat_00001.1.el7eap, 3.4.0-2.Final_redhat_00001.1.el8eap, 3.4.0-2.Final_redhat_00001.1.el9eap
IBM Cloud Pak for Watson AIOps - update to 3.6.0
eap7-resteasy (Red Hat package) - addressed in versions 3.15.5-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el8eap, 3.15.5-1.Final_redhat_00001.1.el9eap
Red Hat Camel for Spring Boot - addressed in versions 3.18.3 Patch 2, 3.20.1
eap7-jboss-ejb-client (Red Hat package) - addressed in versions 4.0.50-1.Final_redhat_00001.1.el7eap, 4.0.50-1.Final_redhat_00001.1.el8eap, 4.0.50-1.Final_redhat_00001.1.el9eap
QRadar User Behavior Analytics - update to 4.1.12
eap7-netty (Red Hat package) - addressed in versions 4.1.86-1.Final_redhat_00001.1.el7eap, 4.1.86-1.Final_redhat_00001.1.el8eap, 4.1.86-1.Final_redhat_00001.1.el9eap
eap7-netty-transport-native-epoll (Red Hat package) - addressed in versions 4.1.86-1.Final_redhat_00001.1.el7eap, 4.1.86-1.Final_redhat_00001.1.el8eap, 4.1.86-1.Final_redhat_00001.1.el9eap
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.6.2
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.7.0
picocli - update to 4.7.4-1.fc38
App Connect Enterprise Certified Container - addressed in versions 5.0.2, 6.2.0
IBM Case Manager - update to 5.3.3-IF011
eap7-jbossws-cxf (Red Hat package) - addressed in versions 5.4.8-1.Final_redhat_00001.1.el7eap, 5.4.8-1.Final_redhat_00001.1.el8eap, 5.4.8-1.Final_redhat_00001.1.el9eap
IBM Sterling Partner Engagement Manager - addressed in versions 6.1.2.10, 6.2.3.2
Red Hat Migration Toolkit for Applications - update to 6.2.0
IBM Spectrum Symphony - update to 7.3.2 Fix 601711
eap7-wildfly (Red Hat package) - addressed in versions 7.4.10-6.GA_redhat_00002.1.el7eap, 7.4.10-6.GA_redhat_00002.1.el8eap, 7.4.10-6.GA_redhat_00002.1.el9eap
Fuse - update to 7.12.0
Maximo Data Loader - update to 8.5.0
IBM Maximo Application Suite - addressed in versions 8.9.6, 8.10.4
Operational Decision Manager - addressed in versions 8.10.5.2 Interim fix 1, 8.11.0.1 Interim fix 30, 8.11.1 Interim fix 24, 8.12.0.1 Interim fix 5
IBM MQ - addressed in versions 9.2.0.7, 9.3.0.2, 9.3.2.0
eap7-infinispan (Red Hat package) - addressed in versions 11.0.17-1.Final_redhat_00001.1.el7eap, 11.0.17-1.Final_redhat_00001.1.el8eap, 11.0.17-1.Final_redhat_00001.1.el9eap
IBM DB2 - update to 11.1.4.7
IBM Cognos Analytics - addressed in versions 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2
IBM InfoSphere Information Server - update to 11.7.1.4 Service pack 1
eap7-jboss-metadata (Red Hat package) - addressed in versions 13.4.0-1.Final_redhat_00001.1.el7eap, 13.4.0-1.Final_redhat_00001.1.el8eap, 13.4.0-1.Final_redhat_00001.1.el9eap
rh-sso7-keycloak (Red Hat package) - addressed in versions 18.0.7-1.redhat_00001.1.el7sso, 18.0.7-1.redhat_00001.1.el8sso, 18.0.7-1.redhat_00001.1.el9sso
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.18, 22.0.2.2
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.1, 23.0.1
IBM Observability with Instana - update to 267
AMQ Clients - update to 2023.Q4

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355

• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in IBM App Connect Enterprise
• Out-of-bounds write in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in IBM Voice Gateway
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Out-of-bounds write in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat build of Eclipse Vert.x
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Out-of-bounds write in IBM Maximo Data Loader
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 9
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 8
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
• Multiple vulnerabilities in IBM Operations Analytics - Log Analysis
• Out-of-bounds write in IBM MQ
• Multiple vulnerabilities in Red Hat Integration Camel for Spring Boot
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for RHEL 9
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for RHEL 8
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for RHEL 7
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for OpenShift
• Multiple vulnerabilities in IBM Db2 Graph
• Multiple vulnerabilities in IBM InfoSphere Information Server
• Multiple vulnerabilities in Migration Toolkit for Runtimes
• Multiple vulnerabilities in IBM QRadar User Behavior Analytics
• Multiple vulnerabilities in IBM i Modernization Engine for Lifecycle Integration
• Multiple vulnerabilities in Red Hat Integration Camel for Spring Boot
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• Multiple vulnerabilities in IBM Watson Discovery Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in IBM Maximo Application Suite - Monitor Component
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications
• Fedora 38 update for picocli
• Multiple vulnerabilities in IBM Spectrum Symphony
• Multiple vulnerabilities in IBM Business Automation Workflow and IBM Case Manager
• Out-of-bounds write in IBM Sterling B2B Integrator
• Multiple vulnerabilities in Red Hat AMQ Clients
• Multiple vulnerabilities in IBM Db2
• Multiple vulnerabilities in IBM Watson Machine Learning Accelerator on Cloud Pak for Data
• Multiple vulnerabilities in IBM Observability with Instana
• Multiple vulnerabilities in IBM Cognos Analytics
• openEuler 22.03 LTS update for snakeyaml
• openEuler 22.03 LTS SP1 update for snakeyaml
• openEuler 20.03 LTS SP1 update for snakeyaml
• openEuler 20.03 LTS SP3 update for snakeyaml
• openEuler 22.03 LTS update for snakeyaml
• Multiple vulnerabilities in IBM WebSphere Service Registry and Repository
• Multiple vulnerabilities in IBM Integration Designer
• Multiple vulnerabilities in IBM Operational Decision Manager
• IBM Sterling Partner Engagement Manager Essentials Edition update for snakeYAML
• Multiple vulnerabilities in Fuse 7
• Fedora 36 update for snakeyaml
• Fedora 37 update for snakeyaml
• Multiple vulnerabilities in IBM watsonx.data
• Amazon Linux AMI update for snakeyaml
• Multiple vulnerabilities in Cloudera Data Platform Private Cloud Base with IBM (CDP)