Unrated severityNVD Advisory· Published Jan 22, 2020· Updated Aug 5, 2024

CVE-2019-20395

Description

A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

libyang/libyangdescription
libyang/libyangllm-fuzzy
Range: <v1.0-r1

Patches

Vulnerability mechanics

References

lists.debian.org/debian-lts-announce/2023/09/msg00019.htmlmitremailing-list
bugzilla.redhat.com/show_bug.cgimitre
github.com/CESNET/libyang/commit/4e610ccd87a2ba9413819777d508f71163fcc237mitre
github.com/CESNET/libyang/compare/v0.16-r3...v1.0-r1mitre
github.com/CESNET/libyang/issues/724mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000