Beveiligingsadvies

CVE-2019-20393

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-01-22 00:00:00
Laatst bijgewerkt 2024-08-05 02:39:09
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.