PT-2021-4115 · Libyang+2 · Libyang+2
Zounathan
·
Published
2021-03-08
·
Updated
2022-09-12
·
CVE-2021-28904
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libyang versions prior to 1.0.225
Description
The issue is related to the function
ext get plugin() in the libyang library, where it fails to check if the revision value is NULL. This oversight can lead to a crash when the strcmp function is called with a NULL revision argument. The vulnerability can be exploited by a remote attacker to cause a denial of service.Recommendations
For libyang versions prior to 1.0.225, consider adding a NULL check for the
revision variable before calling the strcmp function to prevent the crash. As a temporary workaround, restrict the use of the ext get plugin() function until a patch is available.Exploit
Fix
Unchecked Return Value
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Suse
Libyang