CVE-2019-20395

Medium

A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications…

mitre·CWE-674·Published 2020-01-22

CVSS

6.5

EPSS

0.02

KEV

Exploits

cve.orgen

199 chars

A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.

NVDen

199 chars

A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.

Un problema de consumo de pila está presente en libyang versiones anteriores a v1.0-r1, debido al tipo de unión autorreferencial que contiene leafrefs. Las aplicaciones que usan libyang para analizar archivos de entrada yang no confiables pueden bloquearse.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H