LI
Product
libyang
19
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 10Medium 7Low 0
Watch
Add libyang to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-20398 | 6.5 | Jan 22 | A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved extensions in lys_restr_dup() Affected: 0.11; 0.11; 0.12; 0.12; 0.13; 0.13; +7 more |
| CVE-2019-20396 | 6.5 | Jan 22 | A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing Affected: 0.11; 0.11; 0.12; 0.12; 0.13; 0.13; +5 more |
| CVE-2019-20395 | 6.5 | Jan 22 | A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs Affected: 0.11; 0.11; 0.12; 0.12; 0.13; 0.13; +5 more |
| CVE-2019-20392 | 6.5 | Jan 22 | An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list key node, and the… Affected: 0.11; 0.11; 0.12; 0.12; 0.13; 0.13; +5 more |
| CVE-2019-20391 | 6.5 | Jan 22 | An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit Affected: 0.11; 0.11; 0.12; 0.12; 0.13; 0.13; +7 more |
| CVE-2026-115327 | 5.3 | Oct 22 | libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser Affected: through 6.4.13 |
| CVE-2023-26916 | 5.3 | Apr 3 | libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c Affected: 2.0.164 through 2.1.30 |
Showing 7