libyang up to 1.0-r4 YANG Parser stack-based overflow

Summaryinfo

A vulnerability marked as critical has been reported in libyang up to 1.0-r4. Impacted is an unknown function of the component YANG Parser. Performing a manipulation results in stack-based overflow. This vulnerability is known as CVE-2019-19334. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in libyang up to 1.0-r4. This affects an unknown code of the component YANG Parser. The manipulation with an unknown input leads to a stack-based overflow vulnerability. CWE is classifying the issue as CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or possibly gain code execution.

The weakness was published 12/06/2019 as not defined bug report (Bugzilla). The advisory is shared at bugzilla.redhat.com. This vulnerability is uniquely identified as CVE-2019-19334 since 11/27/2019. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 236734 (Alibaba Cloud Linux 3 : 0076: libyang (ALINUX3-SA-2022:0076)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.0-r5 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (236734). Similar entry is available at VDB-146744. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Name

• libyang

Version

• 1.0-r4

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion