Lucene search
+L

2205 matches found

RedhatCVE
RedhatCVE
added 2020/01/23 9:39 a.m.28 views

CVE-2019-20392

An invalid memory access flaw was discovered in libyang in the function resolvefeaturevalue when an if-feature statement is used inside a list key node and the feature used is not defined. Applications that use libyang to process untrusted input YANG files may crash...

6.5CVSS2.2AI score0.01859EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2020/01/23 9:39 a.m.29 views

CVE-2019-20391

An invalid memory access flaw occurs in libyang in the function resolvefeaturevalue when an if-feature statement is used inside a bit. Applications that use libyang to process untrusted input YANG files may crash...

6.5CVSS3.5AI score0.01859EPSS
SaveExploits1References3
Veracode
Veracode
added 2020/01/23 9:15 a.m.21 views

Denial Of Service (DoS)

libyang.so is vulnerable to denial of service DoS. A double free error occurs due to the use of type statement in notification statement in the function lysparsepath, causing an application or arbitrary code execution...

8.8CVSS5.6AI score0.0279EPSS
SaveExploits1References5Affected Software2
Veracode
Veracode
added 2020/01/23 1:45 a.m.21 views

Denial Of Service (DoS)

libyang.so is vulnerable to denial of service DoS. The attacker can trigger a segmentation fault SIGSEGV signal by parsing a malformed pattern statement as lysparsepath...

6.5CVSS4.7AI score0.01914EPSS
SaveExploits1References4Affected Software2
NVD
NVD
added 2020/01/22 10:15 p.m.16 views

CVE-2019-20396

A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lysparsepath parsing...

6.5CVSS6.6AI score0.01914EPSS
SaveExploits1References4
OSV
OSV
added 2020/01/22 10:15 p.m.23 views

CVE-2019-20392

An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolvefeaturevalue when an if-feature statement is used inside a list key node, and the feature used is not defined. Applications that use libyang to parse untrusted input yang files may crash...

6.5CVSS6.5AI score
SaveExploits0References5
NVD
NVD
added 2020/01/22 10:15 p.m.19 views

CVE-2019-20392

An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolvefeaturevalue when an if-feature statement is used inside a list key node, and the feature used is not defined. Applications that use libyang to parse untrusted input yang files may crash...

6.5CVSS6.6AI score0.01859EPSS
SaveExploits1References5
OSV
OSV
added 2020/01/22 10:15 p.m.19 views

CVE-2019-20391

An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolvefeaturevalue when an if-feature statement is used inside a bit. Applications that use libyang to parse untrusted input yang files may crash...

6.5CVSS6.5AI score
SaveExploits0References5
OSV
OSV
added 2020/01/22 10:15 p.m.16 views

UBUNTU-CVE-2019-20394

A double-free is present in libyang before v1.0-r3 in the function yyparse when a type statement in used in a notification statement. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution...

8.8CVSS5.8AI score0.0279EPSS
SaveExploits1References6
Prion
Prion
added 2020/01/22 10:15 p.m.14 views

Design/Logic Flaw

An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolvefeaturevalue when an if-feature statement is used inside a bit. Applications that use libyang to parse untrusted input yang files may crash...

4.3CVSS6.5AI score0.01859EPSS
SaveExploits1References5Affected Software1
UbuntuCve
UbuntuCve
added 2020/01/22 10:15 p.m.22 views

CVE-2019-20391

An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolvefeaturevalue when an if-feature statement is used inside a bit. Applications that use libyang to parse untrusted input yang files may crash...

6.5CVSS6.6AI score0.01859EPSS
SaveExploits1References5
OSV
OSV
added 2020/01/22 10:15 p.m.8 views

PYSEC-2020-169

A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lysparsepath parsing...

7AI score
SaveExploits0References3
Prion
Prion
added 2020/01/22 10:15 p.m.18 views

Design/Logic Flaw

An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolvefeaturevalue when an if-feature statement is used inside a list key node, and the feature used is not defined. Applications that use libyang to parse untrusted input yang files may crash...

4.3CVSS6.5AI score0.01859EPSS
SaveExploits1References5Affected Software1
Prion
Prion
added 2020/01/22 10:15 p.m.18 views

Double free

A double-free is present in libyang before v1.0-r3 in the function yyparse when a type statement in used in a notification statement. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution...

6.8CVSS8.7AI score0.0279EPSS
SaveExploits1References5Affected Software1
UbuntuCve
UbuntuCve
added 2020/01/22 10:15 p.m.22 views

CVE-2019-20392

An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolvefeaturevalue when an if-feature statement is used inside a list key node, and the feature used is not defined. Applications that use libyang to parse untrusted input yang files may crash...

6.5CVSS6.6AI score0.01859EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2020/01/22 10:15 p.m.25 views

CVE-2019-20396

A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lysparsepath parsing...

6.5CVSS6.6AI score0.01914EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2020/01/22 12:0 a.m.22 views

CVE-2019-20392

An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolvefeaturevalue when an if-feature statement is used inside a list key node, and the feature used is not defined. Applications that use libyang to parse untrusted input yang files may crash...

7.3AI score0.01859EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2020/01/22 12:0 a.m.5 views

PT-2020-1238 · Libyang · Libyang

Name of the Vulnerable Software and Affected Versions: libyang versions prior to v1.0-r3 Description: A double-free issue is present in the yyparse function when a type statement is used in a notification statement. This affects applications that use libyang to parse untrusted input yang files,...

8.8CVSS6.7AI score0.0279EPSS
SaveExploits7References42
Debian CVE
Debian CVE
added 2020/01/22 12:0 a.m.53 views

CVE-2019-20394

A double-free is present in libyang before v1.0-r3 in the function yyparse when a type statement in used in a notification statement. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution...

8.8CVSS8.8AI score0.0279EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2020/01/22 12:0 a.m.45 views

CVE-2019-20396

A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lysparsepath parsing...

6.5CVSS6.6AI score0.01914EPSS
SaveExploits1
Rows per page
Query Builder