Browse CVEs

HIGH 7.5 CVE-2023-26917 libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c. Libyang after 2.1.30 Fix from $1,9502023-04-11 MEDIUM 5.5 CVE-2016-15014 A vulnerability has been found in CESNET theme-cesnet up to 1.x on ownCloud and classified as problematic. Affected by this vulnerability is an unkno… Theme Cesnet 2.0.0+ Fix from $1,6002023-01-07 HIGH 7.5 CVE-2021-28902 In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL,… Libyang after 1.0.225 Fix from $1,9502021-05-20 HIGH 7.5 CVE-2021-28903 A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called … Libyang after 1.0.225 Fix from $1,9502021-05-20 HIGH 7.5 CVE-2021-28904 In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of st… Libyang after 1.0.225 Fix from $1,9502021-05-20 HIGH 7.5 CVE-2021-28905 In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some cases, node->module can be n… Libyang after 1.0.225 Fix from $1,9502021-05-20 HIGH 7.5 CVE-2021-28906 In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, whic… Libyang after 1.0.225 Fix from $1,9502021-05-20 HIGH 7.5 CVE-2020-5281 In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in … Perun 3.9.1+ Fix from $1,9502020-03-25 HIGH 8.8 CVE-2019-20393 A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to pars… Libyang Patch available Fix from $1,9502020-01-22 HIGH 8.8 CVE-2019-20394 A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications … Libyang Patch available Fix from $1,9502020-01-22 HIGH 8.8 CVE-2019-20397 A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use liby… Libyang Patch available Fix from $1,9502020-01-22 MEDIUM 6.5 CVE-2019-20391 An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used insid… Libyang Patch available Fix from $1,6002020-01-22 MEDIUM 6.5 CVE-2019-20392 An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used insid… Libyang Patch available Fix from $1,6002020-01-22 MEDIUM 6.5 CVE-2019-20395 A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use liby… Libyang Patch available Fix from $1,6002020-01-22 MEDIUM 6.5 CVE-2019-20396 A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing. Libyang Patch available Fix from $1,6002020-01-22 MEDIUM 6.5 CVE-2019-20398 A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved extensions… Libyang Patch available Fix from $1,6002020-01-22 CRITICAL 9.8 CVE-2019-15537 The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php. Proxystatistics 3.1.0+ Fix from $2,3002019-08-23