CVE-2021-28903 | BDVDB-2026-154049 Detail

Description#

A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and lead to crash.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/CESNET/libyang/issues/1453
https://security.gentoo.org/glsa/202107-54

Exploit#

No public exploit known

History#

Version 12021-05-20Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.