An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list key node, and the feature used is not defined. Applications that use libyang to parse untrusted input yang files may crash.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cesnet libyang 0.16 |
||
cesnet libyang 0.13 |
||
cesnet libyang 0.12 |
||
cesnet libyang 0.11 |
||
cesnet libyang 0.14 |
||
cesnet libyang 0.15 |
Vulmon