Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libyang 资源管理错误漏洞
Vulnerability Description
libyang是一款使用C语言编写的YANG数据建模语言解析器和工具包。 libyang 1.0-r3之前版本中的‘yyparse()’函数存在输入验证错误漏洞。攻击者可利用该漏洞造成应用程序崩溃或可能执行代码。
CVSS Information
N/A
Vulnerability Type
N/A