CVE-2019-20392

An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list…

published January 22, 2020

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list key node, and the feature used is not defined. Applications that use libyang to parse untrusted input yang files may crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01876 · 79.2th percentile
Published
2020-01-22T00:00Z
EPSS history
Timeline
  • 22 JAN 00:00Z
    An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list…
    cvelistv5