rpm package
suse/libyang&distro=SUSE Linux Enterprise Server 15 SP5-LTSS
pkg:rpm/suse/libyang&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-41401 | Med | 6.5 | < 2.1.55-150500.3.5.1 | 2.1.55-150500.3.5.1 | May 26, 2026 | libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents w | |
| CVE-2026-44673 | Hig | 7.5 | < 2.1.55-150500.3.5.1 | 2.1.55-150500.3.5.1 | May 14, 2026 | libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang c |
- affected < 2.1.55-150500.3.5.1fixed 2.1.55-150500.3.5.1
libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents w
- affected < 2.1.55-150500.3.5.1fixed 2.1.55-150500.3.5.1
libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang c