Skip to content
fr Sign in
8.1 High

CVE-2019-19333 In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG…

Description

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or possibly gain code execution.

Affected products and versions

Product Affected versions Fixed in
libyang Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of libyang

The 2 CVEs of libyang →
CVE-2019-19334 In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG… 8.1 High
Track this CVE