Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-28905

Опубликовано: 20 мая 2021
Источник: ubuntu
Приоритет: low
CVSS2: 5
CVSS3: 7.5

Описание

In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617).

РелизСтатусПримечание
bionic

DNE

devel

not-affected

3.7.8-3
esm-apps/focal

needed

esm-apps/jammy

not-affected

1.0.225-1.1
esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needed
groovy

ignored

end of life
hirsute

ignored

end of life
impish

not-affected

1.0.225-1.1
jammy

not-affected

1.0.225-1.1

Показывать по

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
почти 5 лет назад

In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617).

CVSS3: 7.5
nvd
больше 4 лет назад

In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617).

CVSS3: 7.5
debian
больше 4 лет назад

In function lys_node_free() in libyang <= v1.0.225, it asserts that th ...

suse-cvrf
больше 3 лет назад

Security update for libyang

CVSS3: 7.5
github
больше 3 лет назад

In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617).

5 Medium

CVSS2

7.5 High

CVSS3