Logo
componentlibyang
Name
libyang
Version
2.0.164
Type
library
Description
YANG data modeling language library
Licenses
BSD-3-Clause
PURL
-
CPE
cpe:2.3:*:cesnet:libyang:2.0.164:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
master
3.13.6
scarthgap
2.1.148

Patches#


#
Title
Author
Resolve
1
parser common BUGFIX handle missing YANG strings
Michal Vasko <mvasko@cesnet.cz>
CVE-2023-26917
2
schema compile UPDATE do not implement 2 same modules
Michal Vasko <mvasko@cesnet.cz>
CVE-2023-26916
3
libyang: fix initial build errors
Tony Tascioglu <tony.tascioglu@windriver.com>

Vulnerabilities#


Name
Analysis
Description
Patched
libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.
Patched
libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c.