CVE-2019-20396

CVE	CVE-2019-20396
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2020-01-22 22:15:00 UTC
Updated	2023-09-19 22:15:00 UTC
Description	A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing.

Problem Types: CWE-119

Type	Vendor	Product	Version	Update	Edition	Language
Application	Cesnet	Libyang	0.11	r1	All	All
Application	Cesnet	Libyang	0.11	r2	All	All
Application	Cesnet	Libyang	0.12	r1	All	All
Application	Cesnet	Libyang	0.12	r2	All	All
Application	Cesnet	Libyang	0.13	r1	All	All
Application	Cesnet	Libyang	0.13	r2	All	All
Application	Cesnet	Libyang	0.14	r1	All	All
Application	Cesnet	Libyang	0.15	r1	All	All
Application	Cesnet	Libyang	0.16	r1	All	All
Application	Cesnet	Libyang	0.16	r2	All	All
Application	Cesnet	Libyang	0.16	r3	All	All
Application	Cesnet	Libyang	0.11	r1	All	All
Application	Cesnet	Libyang	0.11	r2	All	All
Application	Cesnet	Libyang	0.12	r1	All	All
Application	Cesnet	Libyang	0.12	r2	All	All
Application	Cesnet	Libyang	0.13	r1	All	All
Application	Cesnet	Libyang	0.13	r2	All	All
Application	Cesnet	Libyang	0.14	r1	All	All
Application	Cesnet	Libyang	0.15	r1	All	All
Application	Cesnet	Libyang	0.16	r1	All	All
Application	Cesnet	Libyang	0.16	r2	All	All
Application	Cesnet	Libyang	0.16	r3	All	All

Reference	Source	Link	Tags
Segmentation fault in yyparse due to malformed pattern statement value · Issue #740 · CESNET/libyang · GitHub	MISC	github.com	Exploit, Third Party Advisory
Comparing v0.16-r3...v1.0-r1 · CESNET/libyang · GitHub	MISC	github.com	Third Party Advisory
[SECURITY] [DLA 3572-1] libyang security update	MLIST	lists.debian.org
yang parser BUGFIX allocate more patterns than currently needed · CESNET/libyang@a1f1769 · GitHub	MISC	github.com	Patch, Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.