Skip to content
OpenAdvisories

Vendor

CESNET

8 known vulnerabilities.

Products

ipfixcol2 3 libyang 2 perun 1 netopeer2 1 theme-cesnet 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-122129

    CESNET ipfixcol2 2.7.1 before 2.9.0 Memory Exhaustion via TCP LZ4 Decoder

    CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::read_start_header() that allows unauthenticated attackers to exhaust memory by declaring unbounded ring buffer sizes. Attackers can open TCP connections sending LZ4 …

    CESNET ipfixcol2 ipfixcol2 ipfixcol2 Debian Ubuntu
  • Medium 5.3
    CVE-2026-115327

    libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser

    libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src/parser_xml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via l…

    CESNET libyang libyang libyang Debian Ubuntu
  • Medium 6.2
    CVE-2020-5281

    LDAP connector injection in Perun

    In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input.

    CESNET perun