CVE-2019-20395
22.01.2020, 22:15
A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cesnet | libyang | 0.11:r1 |
| cesnet | libyang | 0.11:r2 |
| cesnet | libyang | 0.12:r1 |
| cesnet | libyang | 0.12:r2 |
| cesnet | libyang | 0.13:r1 |
| cesnet | libyang | 0.13:r2 |
| cesnet | libyang | 0.14:r1 |
| cesnet | libyang | 0.15:r1 |
| cesnet | libyang | 0.16:r1 |
| cesnet | libyang | 0.16:r2 |
| cesnet | libyang | 0.16:r3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libyang |
| ||||||||||||||||||||||||||
| libyang2 |
|
Common Weakness Enumeration
References