Alpine/libyang: high 7.5
A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and lea
Action: Upgrade libyang to 1.0.215-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.215-r1 | - |
Fixed versions
| 1.0.215-r1 |
Sources
- osv: ALPINE-CVE-2021-28903#Alpine:v3.14/libyang
- https://security.alpinelinux.org/vuln/CVE-2021-28903
published · modified · JSON