Description
An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit. Applications that use libyang to parse untrusted input yang files may crash.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://github.com/CESNET/libyang/commit/bdb596ddc07596fa212f231135b87d0b9178f6f8 ↗
- https://github.com/CESNET/libyang/issues/772 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1793934 ↗
- https://github.com/CESNET/libyang/compare/v1.0-r2...v1.0-r3 ↗
- https://lists.debian.org/debian-lts-announce/2023/09/msg00019.html ↗