PT-2023-20845 · Libyang+4 · Libyang+4
Thonsun
·
Publicado
2023-04-11
·
Atualizado
2025-09-16
·
CVE-2023-26917
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libyang versions 2.0.164 through 2.1.30
Description
The issue is related to a NULL pointer dereference in the function
lysp stmt validate value at lys parse mem.c. This problem can be triggered, potentially leading to unintended behavior or crashes. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.Recommendations
For libyang versions 2.0.164 through 2.1.30, consider updating to a version that contains a fix for this issue, as no specific workaround or mitigation measures are provided in the given information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Debian
Linuxmint
Ubuntu
Libyang