high7.5
CVE-2021-28904
In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL.
Impact
In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmp(revision, ext_plugins[u].revision) will lead to a crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cesnet | Libyang | through 1.0.225 |