| Package | Affected versions | Patched versions |
|---|---|---|
| libyang | = 0.11= 0.12= 0.13= 0.14= 0.15= 0.16 |
A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free