EUVD-2023-30708

Malicious code in bioql PyPI...

libyang:lys_parse_mem: Crash in lysc_update_path

Detailed Report: https://oss-fuzz.com/testcase?key=5084602044055552 Project: libyang Fuzzing Engine: centipede Fuzz Target: lysparsemem Job Type: centipedeasanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7b61c387a0cf Crash State: lyscupdatepath lyscompilenode lyscompile...

libyang lys_parse_mem Buffer Overflow DoS

The vulnerability of the lysparsemem function, a syntax analyzer and tool for data modeling language YANG libyang, is related to the use of NULL pointers. Exploiting this vulnerability could allow an attacker to cause service failures during the verification of whether the value of mod-revision i...

libyang:lys_parse_mem: Heap-buffer-overflow in get_argument

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5207981082869760 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lysparsemem Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c.

...

SUSE CVE-2023-26916

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysparsemem at lysparsemem.c...

CVE-2023-26916

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysparsemem at lysparsemem.c...

AZL-25966 CVE-2023-26916 affecting package libyang for versions less than 2.1.55-1

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysparsemem at lysparsemem.c...

DEBIAN-CVE-2023-26916

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysparsemem at lysparsemem.c...

CVE-2023-26916

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysparsemem at lysparsemem.c...

Null pointer dereference

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysparsemem at lysparsemem.c...

CVE-2023-26916

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysparsemem at lysparsemem.c...

CVE-2023-26916

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysparsemem at lysparsemem.c...

CVE-2023-26916: NULL Pointer Dereference

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysparsemem at lysparsemem.c...

CVE-2023-26916

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysparsemem at lysparsemem.c...

LibYang code issue vulnerabilities

libyang is a YANG data modeling language parser and toolkit written in C. A security vulnerability exists in libyang versions v2.0.164 through v2.1.30, which stems from a NULL pointer dereference in the function lysparsemem in lysparsemem.c. The vulnerability is caused by a NULL pointer dereferen...

libyang:lys_parse_mem: Crash in lysp_check_identifierchar

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5330744454021120 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lysparsemem Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fdb825b16e2 Crash...

libyang:lys_parse_mem: Crash in lysp_check_identifierchar

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=4518168518328320 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lysparsemem Job Type: libfuzzermsanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f23164201b8 Crash...

libyang:lys_parse_mem: Heap-buffer-overflow in parse_revision

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=4561110814556160 Project: libyang Fuzzing Engine: afl Fuzz Target: lysparsemem Job Type: aflasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x60b000010f90 Crash...