451 matches found
SUSE: Security Advisory (SUSE-SU-2022:2922-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for libyang (SUSE-SU-2022:2922-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLES15: libyang-cpp-devel / libyang-cpp1 / libyang-devel / libyang-doc / etc (SUSE-SU-2022:2922-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2922-1 advisory. - CVE-2021-28905: Fixed a reachable assertion which could be exploited by an attacker to cause a denial of service bsc1186377...
SUSE-SU-2022:2922-1 Security update for libyang
This update for libyang fixes the following issues: - CVE-2021-28905: Fixed a reachable assertion which could be exploited by an attacker to cause a denial of service bsc1186377...
new packages: libyang
An update is available for libyang. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...
GLSA-202107-54 : libyang: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202107-54 libyang: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libyang. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...
The vulnerability of the ext_get_plugin() function in the syntax analyzer and data modeling tool of YANG Libyang, related to an unvalidated return value, allows a malicious actor to trigger a service failure.
The vulnerability of the extgetplugin function in the syntax analyzer and data modeling tool of the YANG Libyang language is related to the lack of checking for a NULL revision. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the read_yin_container() function in the syntax analyzer and data modeling tool of the YANG Libyang language lies in its unvalidated return value. This allows attackers to trigger a service failure.
The vulnerability of the readyincontainer function in the syntax analyzer and data modeling tool of the YANG Libyang language is related to the lack of checking for NULL values in retval-extr. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the lys_node_free() function in the syntax analyzer and modeling tool of the YANG Libyang language, related to the insufficient use of the assert() function, allows attackers to trigger a service failure.
The vulnerability of the lysnodefree function in the syntax analyzer and modeling tool of the YANG Libyang language is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the read_yin_leaf() function in the syntax analyzer and tools of the YANG data modeling language Libyang, related to an unvalidated return value, allows attackers to trigger service failures.
The vulnerability of the readyinleaf function in the syntax analyzer and data modeling tool of the YANG Libyang language is related to the lack of checking for NULL values in retval-extr. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the lyxml_parse_mem() function in the syntax analyzer and data modeling tool YANG Libyang, related to an uncontrolled recursion, allows attackers to cause service failures.
The vulnerability of the lyxmlparsemem function, a syntax analyzer and tool for data modeling in the YANG Libyang language, is related to an uncontrolled recursion in the lyxmlparseelem function. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Denial Of Service (DoS)
libyang is vulnerable to denial of service. The vulnerability exists in multiple functions of parseryin.c due to the lack of sanitization of the value retval-extr which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
A stack overflow in libyang can cause a denial of service through function lyxmlparsemem. lyxmlparseelem function will be called recursively, which will consume stack space and lead to crash...
Denial Of Service (DoS)
libyang is vulnerable to denial of service. The function readyincontainer fails to validate the value of retval-extr is NULL., resulting in a crash...
Denial Of Service (DoS)
libyang is vulnerable to denial of service. The function extgetplugin in libyang doesn't check whether the value of revision is NULL. If revision is NULL, leading the operation of strcmprevision, extpluginsu.revision to a crash...
CVE-2021-28906
A flaw was found in libyang. Missing checks in several readyin functions lead to NULL pointer dereferences possibly allowing a remote attacker to crash an application that uses libyang with user-controlled YIN formats. The highest threat from this vulnerability is the service availability...
CVE-2021-28903
A flaw was found in libyang. An uncontrolled recursion in lyxmlparseelem function allows a remote attacker to crash an application that uses libyang with user-controlled XML data. The highest threat from this vulnerability is the service availability...
CVE-2021-28904
A flaw was found in libyang. A NULL pointer dereference in extgetplugin function allows a remote attacker to crash an application that uses libyang with user-controlled YANG data. The highest threat from this vulnerability is the service availability...
CVE-2021-28905
A flaw was found in libyang. An assertion in lysnodefree function may be reached or, if assertions are disabled, a NULL pointer dereference could be triggered allowing a remote attacker to crash an application that uses libyang with user-controlled YIN data. The highest threat from this...
CVE-2021-28902
A flaw was found in libyang. Missing checks in several readyin functions lead to NULL pointer dereferences possibly allowing a remote attacker to crash an application that uses libyang with user-controlled YIN formats. The highest threat from this vulnerability is the service availability...