525 matches found
Design/Logic Flaw
In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...
UBUNTU-CVE-2021-28903
A stack overflow in libyang = v1.0.225 can cause a denial of service through function lyxmlparsemem. lyxmlparseelem function will be called recursively, which will consume stack space and lead to crash...
CVE-2021-28906
In function readyinleaf in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...
Design/Logic Flaw
In function readyinleaf in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...
CVE-2021-28906
CVE-2021-28906 affects libyang ext[r] when it is NULL, causing a crash. Affected packages include libyang and distributions referencing this version. Impact is a crash/denial via NULL pointer dereference. Remediation in documented advisories is to upgrade to a fixed libyang version (e.g., >= 1...
CVE-2021-28906
In function readyinleaf in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...
CVE-2021-28906
In function readyinleaf in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...
CVE-2021-28905
In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...
CVE-2021-28905
In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...
CVE-2021-28905
CVE-2021-28905 affects libyang in versions module is non-NULL; in some cases node->module is NULL, triggering a reachable assertion (CWE-617) and potentially enabling a crash. Documented impact specifies a partial/High-severity outcome with NETWORK access and no data confidentiality/integrity ...
CVE-2021-28905
In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...
CVE-2021-28904
In function extgetplugin in libyang = v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmprevision, extpluginsu.revision will lead to a crash...
CVE-2021-28904
CVE-2021-28904 affects libyang up to version 1.0.225. The vulnerability is a NULL-check issue in ext_get_plugin(): if the revision value is NULL, the code path executes strcmp(revision, ext_plugins[u].revision) and can crash. Public sources describe this as a NULL pointer dereference condition in...
CVE-2021-28904
In function extgetplugin in libyang = v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmprevision, extpluginsu.revision will lead to a crash...
CVE-2021-28903
A stack overflow in libyang = v1.0.225 can cause a denial of service through function lyxmlparsemem. lyxmlparseelem function will be called recursively, which will consume stack space and lead to crash...
CVE-2021-28903
A stack overflow in libyang = v1.0.225 can cause a denial of service through function lyxmlparsemem. lyxmlparseelem function will be called recursively, which will consume stack space and lead to crash...
CVE-2021-28903
CVE-2021-28903 affects libyang =1.0.236 (as noted in GLSA-202107-54) and vendor advisories (SUSE/RHEL) listing CVE-2021-28903 among unpatched or updated contexts. Monitor for updates from vendors and apply the appropriate libyang security update when available.
CVE-2021-28903
A stack overflow in libyang = v1.0.225 can cause a denial of service through function lyxmlparsemem. lyxmlparseelem function will be called recursively, which will consume stack space and lead to crash...
CVE-2021-28902
CVE-2021-28902 affects libyang and is caused by a missing NULL check in read_yin_container() for retval->ext[r], which can be NULL and cause a crash when accessing retval->ext[r]->flags. Affected version: libyang =1.0.236). Impact is a potential crash; no exploit details are provided in ...