libyang resource management error vulnerability (CNVD-2020-10241)

libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A resource management error vulnerability exists in the 'yyparse' function in versions of libyang prior to 1.0-r1. An attacker can exploit this vulnerability to cause an...

DEBIAN-CVE-2019-20396

A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lysparsepath parsing...