| Package | Affected versions | Patched versions |
|---|---|---|
| libyang | = 0.11= 0.12= 0.13= 0.14= 0.15= 0.16= 1.0 |
A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved extensions in lys_restr_dup(). Applications that use libyang to parse untrusted input yang files may crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free