481 matches found
Denial Of Service (DoS)
libyang is vulnerable to denial of service. The function readyincontainer fails to validate the value of retval-extr is NULL., resulting in a crash...
Denial Of Service (DoS)
libyang is vulnerable to denial of service. The function extgetplugin in libyang doesn't check whether the value of revision is NULL. If revision is NULL, leading the operation of strcmprevision, extpluginsu.revision to a crash...
CVE-2021-28906
A flaw was found in libyang. Missing checks in several readyin functions lead to NULL pointer dereferences possibly allowing a remote attacker to crash an application that uses libyang with user-controlled YIN formats. The highest threat from this vulnerability is the service availability...
CVE-2021-28903
A flaw was found in libyang. An uncontrolled recursion in lyxmlparseelem function allows a remote attacker to crash an application that uses libyang with user-controlled XML data. The highest threat from this vulnerability is the service availability...
CVE-2021-28904
A flaw was found in libyang. A NULL pointer dereference in extgetplugin function allows a remote attacker to crash an application that uses libyang with user-controlled YANG data. The highest threat from this vulnerability is the service availability...
CVE-2021-28905
A flaw was found in libyang. An assertion in lysnodefree function may be reached or, if assertions are disabled, a NULL pointer dereference could be triggered allowing a remote attacker to crash an application that uses libyang with user-controlled YIN data. The highest threat from this...
CVE-2021-28902
A flaw was found in libyang. Missing checks in several readyin functions lead to NULL pointer dereferences possibly allowing a remote attacker to crash an application that uses libyang with user-controlled YIN formats. The highest threat from this vulnerability is the service availability...
Libyang has an unspecified vulnerability
libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A security vulnerability exists in libyang version 1.0.225 and earlier versions, which originates in lysnodefree, which does not check if the value of revision is NULL. no...
Unspecified vulnerability in libyang (CNVD-2021-37201)
libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A security vulnerability exists in libyang v1.0.225 and earlier versions, which stems from a failure to check if the value of revision is NULL in the extgetplugin function.No...
Unspecified vulnerability in libyang (CNVD-2021-40524)
libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A security vulnerability exists in libyang version 1.0.225 and earlier versions, which originates in readyinleaf, which does not check if the value of revision is NULL. no...
Unspecified vulnerability in libyang (CNVD-2021-37200)
libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A security vulnerability exists in libyang v1.0.225 and earlier versions, which stems from the readyincontainer function not checking if the value of retval-extr is NULL. no...
Libyang Stack Overflow Vulnerability
libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A security vulnerability exists in libyang version 1.0.225 and earlier versions, which stems from a stack overflow that could lead to a denial of service via the function lysml...
DEBIAN-CVE-2021-28903
A stack overflow in libyang = v1.0.225 can cause a denial of service through function lyxmlparsemem. lyxmlparseelem function will be called recursively, which will consume stack space and lead to crash...
CVE-2021-28903
A stack overflow in libyang = v1.0.225 can cause a denial of service through function lyxmlparsemem. lyxmlparseelem function will be called recursively, which will consume stack space and lead to crash...
CVE-2021-28902
In function readyincontainer in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...
CVE-2021-28905
In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...
CVE-2021-28903
A stack overflow in libyang = v1.0.225 can cause a denial of service through function lyxmlparsemem. lyxmlparseelem function will be called recursively, which will consume stack space and lead to crash...
CVE-2021-28902
In function readyincontainer in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...