Red Hat Security Advisory

RHSA-2019:4360

libyang security update

Released 2019-12-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libyang-0.16.105-3.el8_1.2

Fixes 2 records

TI-2019-13946 CVE-2019-19334 · GHSA-936c-h6q8-79c4

Stack-based buffer overflow in Red Hat libyang

MEDIUM 49

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref".

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0387 Published 2019-12-06 Fixed CWE-121

TI-2019-13945 CVE-2019-19333 · GHSA-68cw-w9pp-fc96

Stack-based buffer overflow in Red Hat libyang

MEDIUM 48

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits".

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03644 Published 2019-12-06 Fixed CWE-121