0.001 Low
EPSS
Percentile
45.5%
In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can’t be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617).
github.com/CESNET/libyang/issues/1452
launchpad.net/bugs/cve/CVE-2021-28905
nvd.nist.gov/vuln/detail/CVE-2021-28905
security-tracker.debian.org/tracker/CVE-2021-28905
www.cve.org/CVERecord?id=CVE-2021-28905