RHEA-2021:1906 Red Hat Enhancement Advisory: libyang bug fix and enhancement update

Bulletin has no description...

RHSA-2019:4360 Red Hat Security Advisory: libyang security update

Bulletin has no description...

Photon OS 4.0: Libyang PHSA-2023-4.0-0380

An update of the libyang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0380. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the yyparse() function in the syntax analyzer and tools for the YANG modeling language Libyang allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the yyparse function in the syntax analyzer and modeling tool of the YANG Libyang language is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures remotely...

OPENSUSE-SU-2024:12836-1 libyang-devel-2.1.55-1.1 on GA media

These are all security issues fixed in the libyang-devel-2.1.55-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 : libyang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libyang: NULL pointer dereference in readyinleaf CVE-2021-28906 - libyang: NULL pointer dereference via...

RHEL 9 : libyang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libyang: NULL pointer dereference via lyspstmtvalidatevalue at lysparsemem.c CVE-2023-26917 Note that Nessus has no...

Vulnerability of the lys_parse_mem function The syntax analyzer and modeling tool for the YANG libyang language allow attackers to trigger a service failure.

The vulnerability of the lysparsemem function, a syntax analyzer and tool for data modeling language YANG libyang, is related to the use of NULL pointers. Exploiting this vulnerability could allow an attacker to cause service failures during the verification of whether the value of mod-revision i...

ROS-20240521-04

Vulnerability of the lysparsemem function parser and data modeling language toolkit for YANG libyang is related to the lack of a check if the value mod-revision is NULL. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

RHEL 9 : libyang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libyang: NULL pointer dereference via lyspstmtvalidatevalue at lysparsemem.c CVE-2023-26917 Note that Nessus has no...

RHEL 8 : libyang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libyang: NULL pointer dereference in readyinleaf CVE-2021-28906 - libyang: NULL pointer dereference via...

Debian dla-3572 : libyang-cpp-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3572 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3572-1 [email protected]...

Debian: Security Advisory (DLA-3572-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3572-1] libyang security update

Debian LTS Advisory DLA-3572-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 19, 2023 https://wiki.debian.org/LTS Package : libyang Version : 0.16.105+really1.0-0+deb10u1 CVE ID : CVE-2019-20391 CVE-2019-20392 CVE-2019-20393 CVE-2019-20394 CVE-2019-203...

DLA-3572-1 libyang - security update

Bulletin has no description...

Oracle Linux 8 : libyang (ELSA-2019-4360)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4360 advisory. - Resolves: 1779573 - CVE-2019-19333 libyang: stack-based buffer overflow in makecanonical when bits leaf type is used Tenable has extracted the...

CVE-2023-26917 affecting package libyang for versions less than 2.1.55-1

CVE-2023-26917 affecting package libyang for versions less than 2.1.55-1. An upgraded version of the package is available that resolves this issue...

Critical Photon OS Security Update - PHSA-2023-4.0-0380

Updates of 'libxml2', 'redis', 'vim', 'bluez', 'libyang' packages of Photon OS have been released...

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.

...

Denial Of Service (DoS)

libyang.so is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause a NULL pointer dereference via the function lyspstmtvalidatevalue in lysparsemem.c, causing the application to crash...