CVE-2023-28118 - Vulnerability Details - OpenCVE

kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and aliases. There are no known workarounds.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Kaml Project	Kaml

Configuration 1 [-]

cpe:2.3:a:kaml_project:kaml:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a
https://github.com/charleskorn/kaml/releases/tag/0.53.0
https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48

History

Tue, 25 Feb 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-03-20T12:39:42.075Z

Updated: 2025-02-25T14:52:56.789Z

Reserved: 2023-03-10T18:34:29.228Z

Link: CVE-2023-28118

Vulnrichment

Updated: 2024-08-02T12:30:24.221Z

NVD

Status : Modified

Published: 2023-03-20T13:15:11.877

Modified: 2024-11-21T07:54:26.560

Link: CVE-2023-28118

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-28118", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-03-10T18:34:29.228Z", "datePublished": "2023-03-20T12:39:42.075Z", "dateUpdated": "2025-02-25T14:52:56.789Z"}, "containers": {"cna": {"title": "kaml has potential denial of service while parsing input with anchors and aliases ", "problemTypes": [{"descriptions": [{"cweId": "CWE-776", "lang": "en", "description": "CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48"}, {"name": "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a", "tags": ["x_refsource_MISC"], "url": "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a"}, {"name": "https://github.com/charleskorn/kaml/releases/tag/0.53.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/charleskorn/kaml/releases/tag/0.53.0"}], "affected": [{"vendor": "charleskorn", "product": "kaml", "versions": [{"version": "< 0.53.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-03-20T12:39:42.075Z"}, "descriptions": [{"lang": "en", "value": "kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and aliases. There are no known workarounds."}], "source": {"advisory": "GHSA-c24f-2j3g-rg48", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T12:30:24.221Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48"}, {"name": "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a"}, {"name": "https://github.com/charleskorn/kaml/releases/tag/0.53.0", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/charleskorn/kaml/releases/tag/0.53.0"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-25T14:30:26.475655Z", "id": "CVE-2023-28118", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-25T14:52:56.789Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48", "name": "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a", "name": "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://github.com/charleskorn/kaml/releases/tag/0.53.0", "name": "https://github.com/charleskorn/kaml/releases/tag/0.53.0", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T12:30:24.221Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-28118", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-25T14:30:26.475655Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-25T14:30:28.850Z"}}], "cna": {"title": "kaml has potential denial of service while parsing input with anchors and aliases ", "source": {"advisory": "GHSA-c24f-2j3g-rg48", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "charleskorn", "product": "kaml", "versions": [{"status": "affected", "version": "< 0.53.0"}]}], "references": [{"url": "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48", "name": "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a", "name": "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/charleskorn/kaml/releases/tag/0.53.0", "name": "https://github.com/charleskorn/kaml/releases/tag/0.53.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and aliases. There are no known workarounds."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-776", "description": "CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-03-20T12:39:42.075Z"}}}, "cveMetadata": {"cveId": "CVE-2023-28118", "state": "PUBLISHED", "dateUpdated": "2025-02-25T14:52:56.789Z", "dateReserved": "2023-03-10T18:34:29.228Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2023-03-20T12:39:42.075Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kaml_project:kaml:*:*:*:*:*:*:*:*", "matchCriteriaId": "14E288FA-2A10-49B3-B836-442D90F4A7D4", "versionEndExcluding": "0.53.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and aliases. There are no known workarounds."}], "id": "CVE-2023-28118", "lastModified": "2024-11-21T07:54:26.560", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-03-20T13:15:11.877", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/charleskorn/kaml/releases/tag/0.53.0"}, {"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/charleskorn/kaml/releases/tag/0.53.0"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-776"}], "source": "security-advisories@github.com", "type": "Secondary"}]}