Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-20398
6.5
MEDIUMCVSS v3
Published
January 22, 2020
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved extensions in lys_restr_dup(). Applications that use libyang to parse untrusted input yang files may crash.
CESNET/libyang
GitHubYANG data modeling language library
GitHubYANG data modeling language library= 1.0, = 0.16, = 0.13, = 0.12, = 0.11, = 0.14, = 0.15NVD