Skip to content
OpenAdvisories

Package · Ubuntu

libyang2

3 known vulnerabilities.

3 results · Feed

  • Medium 5.3

    libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser

    libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src/parser_xml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via l…

  • High 7.5

    libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_valida…

  • Unscored —

    libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at…