SB2022091211 - SUSE update for libyang
Published: September 12, 2022
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 4 secuirty vulnerabilities.
1) Unchecked Return Value (CVE-ID: CVE-2021-28902)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an unchecked return value in the "read_yin_container()" function. A remote attacker can run a specially crafted program to cause a denial of service condition.
2) Uncontrolled Recursion (CVE-ID: CVE-2021-28903)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an uncontrolled recursion in the "lyxml_parse_elem()" function. A remote attacker can cause a denial of service condition on the target system.
3) Unchecked Return Value (CVE-ID: CVE-2021-28904)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an unchecked return value in the "ext_get_plugin()" function. A remote attacker can run a specially crafted program to cause a denial of service condition.
4) Unchecked Return Value (CVE-ID: CVE-2021-28906)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an unchecked return value in the "read_yin_leaf()" function. A remote attacker can run a specially crafted program to cause a denial of service condition.
Remediation
Install update from vendor's website.