Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-26917

Опубликовано: 11 апр. 2023
Источник: debian

Описание

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libyangfixed3.4.2+dfsg-2package
libyangno-dsabullseyepackage
libyang2fixed2.1.148-0.1package
libyang2ignoredbookwormpackage

Примечания

  • https://github.com/CESNET/libyang/issues/1987

  • https://github.com/CESNET/libyang/commit/cfa1a965a429e4bfc5ae1539a8e87a9cf71c3090 (v2.1.55)

  • src:libyang was removed and later re-introduced as src:libyang with version 3

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 3 года назад

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.

CVSS3: 7.5
redhat
почти 3 года назад

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.

CVSS3: 7.5
nvd
почти 3 года назад

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.

CVSS3: 7.5
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 7.5
github
почти 3 года назад

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.