Linux Distros Unpatched Vulnerability : CVE-2019-20391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolvefeaturevalue when an if-feature statement is used inside a bit...

Linux Distros Unpatched Vulnerability : CVE-2019-20392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolvefeaturevalue when an if-feature statement is used inside a list key...

Linux Distros Unpatched Vulnerability : CVE-2019-20396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lysparsepath parsing. CVE-2019-20396 Note...

TencentOS Server 3: libyang (TSSA-2022:0076)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0076 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 4: libyang (TSSA-2025:0069)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0069 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Alibaba Cloud Linux 3 : 0076: libyang (ALINUX3-SA-2022:0076)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0076 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-19333: In all versions of libyang...

Linux Distros Unpatched Vulnerability : CVE-2023-26916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysparsemem at lysparsemem.c. CVE-2023-26916 Note that...

RHEA-2021:1906 Red Hat Enhancement Advisory: libyang bug fix and enhancement update

Bulletin has no description...

RHSA-2019:4360 Red Hat Security Advisory: libyang security update

Bulletin has no description...

Photon OS 4.0: Libyang PHSA-2023-4.0-0380

An update of the libyang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0380. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the yyparse() function in the syntax analyzer and tools for the YANG modeling language Libyang allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the yyparse function in the syntax analyzer and modeling tool of the YANG Libyang language is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures remotely...

OPENSUSE-SU-2024:12836-1 libyang-devel-2.1.55-1.1 on GA media

These are all security issues fixed in the libyang-devel-2.1.55-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 : libyang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libyang: NULL pointer dereference in readyinleaf CVE-2021-28906 - libyang: NULL pointer dereference via...

RHEL 9 : libyang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libyang: NULL pointer dereference via lyspstmtvalidatevalue at lysparsemem.c CVE-2023-26917 Note that Nessus has no...

Vulnerability of the lys_parse_mem function The syntax analyzer and modeling tool for the YANG libyang language allow attackers to trigger a service failure.

The vulnerability of the lysparsemem function, a syntax analyzer and tool for data modeling language YANG libyang, is related to the use of NULL pointers. Exploiting this vulnerability could allow an attacker to cause service failures during the verification of whether the value of mod-revision i...

ROS-20240521-04

Vulnerability of the lysparsemem function parser and data modeling language toolkit for YANG libyang is related to the lack of a check if the value mod-revision is NULL. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

RHEL 9 : libyang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libyang: NULL pointer dereference via lyspstmtvalidatevalue at lysparsemem.c CVE-2023-26917 Note that Nessus has no...

RHEL 8 : libyang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libyang: NULL pointer dereference in readyinleaf CVE-2021-28906 - libyang: NULL pointer dereference via...

Debian dla-3572 : libyang-cpp-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3572 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3572-1 [email protected]...

Debian: Security Advisory (DLA-3572-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...