CVE-2021-28903

A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem()

published May 20, 2021

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and lead to crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02425 · 84.1th percentile
Published
2021-05-20T18:36Z
EPSS history
Timeline
  • 20 MAY 18:36Z
    A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem()
    cvelistv5