📦 Libyang

by Cesnet

🔍 What is Libyang?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-26917

HIGH CVSS 7.5 Apr 11, 2023

This vulnerability is a NULL pointer dereference in libyang's lysp_stmt_validate_value function that can cause denial of service (crash) when processing malicious YANG data. It affects systems using l...

CVE-2021-28902

HIGH CVSS 7.5 May 20, 2021

This vulnerability in libyang's read_yin_container() function allows a NULL pointer dereference when processing certain YANG data models. It affects systems using libyang v1.0.225 and earlier for netw...

CVE-2021-28904

HIGH CVSS 7.5 May 20, 2021

This vulnerability in libyang's ext_get_plugin() function allows a NULL pointer dereference when the revision parameter is NULL, causing a crash. It affects systems using libyang v1.0.225 and earlier ...

CVE-2021-28906

HIGH CVSS 7.5 May 20, 2021

This vulnerability in libyang's read_yin_leaf() function allows a NULL pointer dereference when processing malformed YANG data. It affects systems using libyang v1.0.225 and earlier for network config...