Lucene search
+L

457 matches found

RedHat Linux
RedHat Linux
added 2019/12/23 8:55 a.m.106 views

Important: Red Hat Security Advisory: libyang security update

An update for libyang is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

9.8CVSS7.7AI score0.0387EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2019/12/23 8:55 a.m.5 views

libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used

A stack-based buffer overflow flaw was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or execute code...

9.8CVSS6.3AI score0.0387EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2019/12/23 3:32 a.m.62 views

Important: libyang security update

The libyang package provides a library for YANG data modeling language. libyang is a YANG data modelling language parser and toolkit written and providing API in C. The library is used e.g. in libnetconf2, Netopeer2, sysrepo and FRRouting projects. Security Fixes: libyang: stack-based buffer...

7.5CVSS9.6AI score0.0387EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/12/23 12:0 a.m.56 views

RHEL 8 : libyang (RHSA-2019:4360)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:4360 advisory. The libyang package provides a library for YANG data modeling language. libyang is a YANG data modelling language parser and toolkit written...

9.8CVSS8.3AI score0.0387EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2019/12/22 12:0 a.m.20 views

Fedora Update for libyang FEDORA-2019-9d83929ffa

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.5AI score0.03644EPSS
SaveExploits0References2
Fedora
Fedora
added 2019/12/18 3:17 p.m.28 views

[SECURITY] Fedora 30 Update: libyang-1.0.101-1.fc30

Libyang is YANG data modeling language parser and toolkit written and providing API in C...

9.8CVSS3.5AI score0.0387EPSS
SaveExploits0
Fedora
Fedora
added 2019/12/18 1:55 a.m.26 views

[SECURITY] Fedora 31 Update: libyang-1.0.101-1.fc31

Libyang is YANG data modeling language parser and toolkit written and providing API in C...

9.8CVSS3.5AI score0.0387EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/12/18 12:0 a.m.28 views

Fedora 30 : libyang (2019-9d83929ffa)

Rebase to version 1.0.101 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

9.8CVSS7.6AI score0.0387EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/12/18 12:0 a.m.32 views

Fedora 31 : libyang (2019-dfe0b42bc5)

Rebase to version 1.0.101 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

9.8CVSS7.6AI score0.0387EPSS
SaveExploits0References3
CNVD
CNVD
added 2019/12/10 12:0 a.m.3 views

libyang buffer overflow vulnerability (CNVD-2019-45325)

libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A buffer overflow vulnerability exists in versions prior to libyang 1.0-r5. The vulnerability stems from a networked system or product that performs operations in memory withou...

9.8CVSS7.3AI score0.03644EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/10 12:0 a.m.5 views

Libyang Buffer Overflow Vulnerability

libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A buffer overflow vulnerability exists in versions prior to libyang 1.0-r5. The vulnerability stems from a networked system or product that performs operations in memory withou...

9.8CVSS7.3AI score0.0387EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/06 4:15 p.m.2 views

DEBIAN-CVE-2019-19334

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a...

9.8CVSS7.6AI score0.0387EPSS
SaveExploits0References1
NVD
NVD
added 2019/12/06 4:15 p.m.18 views

CVE-2019-19334

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a...

9.8CVSS9.3AI score0.0387EPSS
SaveExploits0References5
OSV
OSV
added 2019/12/06 4:15 p.m.2 views

DEBIAN-CVE-2019-19333

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of...

9.8CVSS8.4AI score0.03644EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/06 4:15 p.m.19 views

CVE-2019-19334

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a...

9.8CVSS7.9AI score
SaveExploits0References5
NVD
NVD
added 2019/12/06 4:15 p.m.21 views

CVE-2019-19333

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of...

9.8CVSS9.3AI score0.03644EPSS
SaveExploits0References5
OSV
OSV
added 2019/12/06 4:15 p.m.16 views

CVE-2019-19333

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of...

9.8CVSS7.9AI score
SaveExploits0References5
Prion
Prion
added 2019/12/06 4:15 p.m.18 views

Stack overflow

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of...

7.5CVSS8.4AI score0.03644EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2019/12/06 4:15 p.m.17 views

CVE-2019-19334

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a...

9.8CVSS7.5AI score0.0387EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2019/12/06 4:15 p.m.35 views

CVE-2019-19333

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of...

9.8CVSS7.5AI score0.03644EPSS
SaveExploits0References2
Rows per page
Query Builder