CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2021-28906 – Gentoo Linux Security Advisory 202107-54
https://notcve.org/view.php?id=CVE-2021-28906
20 May 2021 — In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->flags that results in a crash. En la función read_yin_leaf() en libyang versiones anteriores a v1.0.225 incluyéndola, no comprueba si el valor de retval-)ext [r] es NULL. En algunos casos, puede ser NULL, lo que conlleva a la operación de retval-)ext[r]-)flags que resulta en un bloqueo Multiple vulnerabilities ha... • https://github.com/CESNET/libyang/issues/1455 • CWE-252: Unchecked Return Value •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2021-28905 – Gentoo Linux Security Advisory 202107-54
https://notcve.org/view.php?id=CVE-2021-28905
20 May 2021 — In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617). En la función lys_node_free() en libyang versiones anteriores a v1.0.225 incluyéndola, afirma que el valor de node-)module no puede ser NULL. Pero en algunos casos, node-) module puede ser nulo, lo que desencadena una aserción alcanzable (CWE-617) Multiple vulnerabilities have been found in libyang, the ... • https://github.com/CESNET/libyang/issues/1452 • CWE-617: Reachable Assertion •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2021-28904 – Gentoo Linux Security Advisory 202107-54
https://notcve.org/view.php?id=CVE-2021-28904
20 May 2021 — In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmp(revision, ext_plugins[u].revision) will lead to a crash. En la función ext_get_plugin() en libyang versiones anteriores a v1.0.225 incluyéndola, no comprueba si el valor de la revisión es NULL. Si la revisión es NULL, la operación de strcmp (revisión, ext_plugins[u] .revision) provocará un bloqueo Multiple vulnerabilities have been found in libyang, t... • https://github.com/CESNET/libyang/issues/1451 • CWE-252: Unchecked Return Value •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 1CVE-2021-28903 – Gentoo Linux Security Advisory 202107-54
https://notcve.org/view.php?id=CVE-2021-28903
20 May 2021 — A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and lead to crash. Un desbordamiento de pila en libyang versiones anteriores a v1.0.225 incluyéndola, puede causar una denegación de servicio por medio de la función lyxml_parse_mem(). La función lyxml_parse_elem() será llamada de forma recursiva, lo que consumirá espacio en la pila y conllevará a un bloqueo Mult... • https://github.com/CESNET/libyang/issues/1453 • CWE-674: Uncontrolled Recursion •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2021-28902 – Gentoo Linux Security Advisory 202107-54
https://notcve.org/view.php?id=CVE-2021-28902
20 May 2021 — In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->flags that results in a crash. En la función read_yin_container() en libyang versiones anteriores a v1.0.225 incluyéndola, no comprueba si el valor de retval-)ext[r] es NULL. En algunos casos, puede ser NULL, lo que conlleva a una operación de retval-)ext [r]-)flags que resulta en un bloqueo Multiple vulnera... • https://github.com/CESNET/libyang/issues/1454 • CWE-252: Unchecked Return Value •
CVSS: 6.5EPSS: 0%CPEs: 13EXPL: 1CVE-2019-20391
https://notcve.org/view.php?id=CVE-2019-20391
22 Jan 2020 — An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit. Applications that use libyang to parse untrusted input yang files may crash. Un fallo de acceso a memoria no válida está presente en libyang versiones anteriores a v1.0-r3, en la función resolve_feature_value() cuando es usada una sentencia if-feature dentro de un bit. Las aplicaciones que usan libyang para analizar archivos de entrada yang no confiabl... • https://bugzilla.redhat.com/show_bug.cgi?id=1793934 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 13EXPL: 1CVE-2019-20394
https://notcve.org/view.php?id=CVE-2019-20394
22 Jan 2020 — A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution. Una doble liberación está presente en libyang versiones anteriores a v1.0-r3, en la función yyparse() cuando se usa una sentencia type dentro de una sentencia notification. Las aplicaciones que usan libyang para analizar ... • https://bugzilla.redhat.com/show_bug.cgi?id=1793932 • CWE-415: Double Free •
CVSS: 6.5EPSS: 0%CPEs: 13EXPL: 1CVE-2019-20398
https://notcve.org/view.php?id=CVE-2019-20398
22 Jan 2020 — A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved extensions in lys_restr_dup(). Applications that use libyang to parse untrusted input yang files may crash. Una desreferencia del puntero NULL está presente en libyang versiones anteriores a v1.0-r3, en la función lys_extension_instances_free() debido a una copia de extensiones no resuelta en la función lys_restr_dup(). Las aplicaciones que usan libyang para analizar arc... • https://bugzilla.redhat.com/show_bug.cgi?id=1793935 • CWE-476: NULL Pointer Dereference •
CVSS: 9.8EPSS: 0%CPEs: 17EXPL: 0CVE-2019-19334 – libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used
https://notcve.org/view.php?id=CVE-2019-19334
06 Dec 2019 — In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or possibly gain code execution. En todas las versiones de libyang anteriores a 1.0-r5, se detectó un desbordamiento del búfer en la región heap de la memoria en la manera en que libyang analiza los ... • https://access.redhat.com/errata/RHSA-2019:4360 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 16EXPL: 0CVE-2019-19333 – libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
https://notcve.org/view.php?id=CVE-2019-19333
06 Dec 2019 — In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or possibly gain code execution. En todas las versiones de libyang anteriores a 1.0-r5, se detectó un desbordamiento del búfer en la región heap de la memoria en la manera en que libyang analiza los archivo... • https://access.redhat.com/errata/RHSA-2019:4360 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •