Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21113-1

Опубликовано: 20 июн. 2026
Источник: suse-cvrf

Описание

Security update for libyang

This update for libyang fixes the following issues

  • CVE-2026-41401: use-after-free in lyd_parser_set_data_flags when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316).
  • CVE-2026-44673: integer overflow in lyb_read_string() of src/parser_lyb.c leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob (bsc#1265330).

Список пакетов

openSUSE Leap 16.0
libyang-devel-2.1.148-160000.4.1
libyang-doc-2.1.148-160000.4.1
libyang2-2.1.148-160000.4.1
yang-tools-2.1.148-160000.4.1

Ссылки

Описание

libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.

Затронутые продукты
openSUSE Leap 16.0:libyang-devel-2.1.148-160000.4.1
openSUSE Leap 16.0:libyang-doc-2.1.148-160000.4.1
openSUSE Leap 16.0:libyang2-2.1.148-160000.4.1
openSUSE Leap 16.0:yang-tools-2.1.148-160000.4.1
Ссылки

Описание

libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption. This vulnerability is fixed in SO 5.2.15.

Затронутые продукты
openSUSE Leap 16.0:libyang-devel-2.1.148-160000.4.1
openSUSE Leap 16.0:libyang-doc-2.1.148-160000.4.1
openSUSE Leap 16.0:libyang2-2.1.148-160000.4.1
openSUSE Leap 16.0:yang-tools-2.1.148-160000.4.1
Ссылки