Linux Distros Unpatched Vulnerability : CVE-2021-28905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617. CVE-2021-2890...

SUSE CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

SUSE: Security Advisory (SUSE-SU-2022:2922-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2922-1 Security update for libyang

This update for libyang fixes the following issues: - CVE-2021-28905: Fixed a reachable assertion which could be exploited by an attacker to cause a denial of service bsc1186377...

CVE-2021-28905

CVE-2021-28905 affects libyang in versions module is non-NULL; in some cases node->module is NULL, triggering a reachable assertion (CWE-617) and potentially enabling a crash. Documented impact specifies a partial/High-severity outcome with NETWORK access and no data confidentiality/integrity ...