libyang: stack-based buffer overflow in make_canonical when bits leaf type is used

A stack-based buffer overflow flaw was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or execute code...

PT-2019-5412

Name of the Vulnerable Software and Affected Versions libyang versions prior to 1.0-r5 Description A stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". This issue may allow an attacker to cause a denial of service or possibly gain code...

CVE-2019-19333: Stack-based Buffer Overflow

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of...