Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-28904HistoryMay 20, 2021 - 7:15 p.m.
CVE-2021-28904
2021-05-2019:15:00
Debian Security Bug Tracker
security-tracker.debian.org
9
0.001 Low
EPSS
Percentile
45.5%
In function ext_get_plugin() in libyang <= v1.0.225, it doesn’t check whether the value of revision is NULL. If revision is NULL, the operation of strcmp(revision, ext_plugins[u].revision) will lead to a crash.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | libyang | <= 1.0.225-1.1 | libyang_1.0.225-1.1_all.deb |
| Debian | 10 | all | libyang | <= 0.16.105-1+deb10u1 | libyang_0.16.105-1+deb10u1_all.deb |
Related
prion
prion
Null pointer dereference
2021-05-20 19:15:00
osv
osv
CVE-2021-28904
2021-05-20 19:15:07
cvelist
cvelist
CVE-2021-28904
2021-05-20 18:36:27
redhatcve
redhatcve
CVE-2021-28904
2021-05-24 15:13:18
alpinelinux
alpinelinux
CVE-2021-28904
2021-05-20 19:15:00
veracode
veracode
Denial Of Service (DoS)
2021-06-01 08:50:01
ubuntucve
ubuntucve
CVE-2021-28904
2021-05-20 00:00:00
cve
cve
CVE-2021-28904
2021-05-20 19:15:00
nessus
nessus
SUSE SLES15 Security Update : libyang (SUSE-SU-2022:3245-1)
2022-09-13 00:00:00
GLSA-202107-54 : libyang: Multiple vulnerabilities
2022-01-24 00:00:00
RHEL 8 : libyang (Unpatched Vulnerability)
2024-05-11 00:00:00
openvas
openvas
openSUSE: Security Advisory for libyang (SUSE-SU-2022:3245-1)
2022-09-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3245-1)
2022-09-13 00:00:00
suse
suse
Security update for libyang (important)
2022-09-12 00:00:00
gentoo
gentoo
libyang: Multiple vulnerabilities
2021-07-24 00:00:00