high7.5
CVE-2021-28903
A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem().
Impact
A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and lead to crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cesnet | Libyang | through 1.0.225 |