Summary
It was discovered that libyang incorrectly handled certain memory
operations when parsing YANG strings. An attacker could possibly use this
issue to cause libyang to crash, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | libyang2 | 2.1.30-2.1ubuntu0.1 |
Vulnerabilities 2
-
High 7.5
libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_valida…
-
Unscored —
libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at…