← All advisories

Medium severity6.5NVD Advisory· Published Jan 22, 2020· Updated Jun 17, 2026

CVE-2019-20396

CVE-2019-20396

Description

A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13

Cesnet/libyang12 versions
cpe:2.3:a:cesnet:libyang:0.11:r1:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:cesnet:libyang:0.11:r1:*:*:*:*:*:*
- cpe:2.3:a:cesnet:libyang:0.11:r2:*:*:*:*:*:*
- cpe:2.3:a:cesnet:libyang:0.12:r1:*:*:*:*:*:*
- cpe:2.3:a:cesnet:libyang:0.12:r2:*:*:*:*:*:*
- cpe:2.3:a:cesnet:libyang:0.13:r1:*:*:*:*:*:*
- cpe:2.3:a:cesnet:libyang:0.13:r2:*:*:*:*:*:*
- cpe:2.3:a:cesnet:libyang:0.14:r1:*:*:*:*:*:*
- cpe:2.3:a:cesnet:libyang:0.15:r1:*:*:*:*:*:*
- cpe:2.3:a:cesnet:libyang:0.16:r1:*:*:*:*:*:*
- cpe:2.3:a:cesnet:libyang:0.16:r2:*:*:*:*:*:*
- cpe:2.3:a:cesnet:libyang:0.16:r3:*:*:*:*:*:*
- (no CPE)range: <v1.0-r1
libyang/libyangdescription

Patches

Vulnerability mechanics

References

4

github.com/CESNET/libyang/commit/a1f17693904ed6fecc8902c747fc50a8f20e6af8nvdPatchThird Party Advisory
github.com/CESNET/libyang/issues/740nvdExploitThird Party Advisory
github.com/CESNET/libyang/compare/v0.16-r3...v1.0-r1nvdThird Party Advisory
lists.debian.org/debian-lts-announce/2023/09/msg00019.htmlnvd

News mentions

0

No linked articles in our index yet.