A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cesnet libyang 1.0 |
||
cesnet libyang 0.16 |
||
cesnet libyang 0.13 |
||
cesnet libyang 0.12 |
||
cesnet libyang 0.11 |
||
cesnet libyang 0.14 |
||
cesnet libyang 0.15 |
Vulmon