Search threats, CVEs… ⌘K
Back to vendor advisories
Microsoft Security Response CenterCVE-2025-11683

YAML::Syck versions before 1.36 for Perl has missing Null-Terminators which causes Out-of-Bounds Read and potential Information Disclosure

MediumVendor CVSS 6.5 / 10 1 CVE Published Oct 21, 2026 at 1:01 AM UTC
Get alerts for azl3 perl-YAML 1.30-2 on Azure Linux

Summary

Mariner

Products covered

  • azl3 perl-YAML 1.30-2 on Azure Linux 3.0

Remediation

Release Notes

CVEs in this advisory 1

CVE-2025-11683

Updates

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

Keep investigating
See every advisory from this vendor
More from this vendor

ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermic

CVE-2026-33554