Back to Database
Status published
High
CVE-2021-28903
A stack overflow in libyang <= v1.0.225 can cause a...
Vulnerability Description
A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and lead to crash.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-28903
Credits & Attribution
No credits recorded in the NVD database.
More from cesnet
View All →CVE-2021-28906
In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check...
High
7.5
CVE-2021-28905
In function lys_node_free() in libyang <= v1.0.225, it asserts that...
High
7.5
CVE-2021-28904
In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check...
High
7.5
CVE-2021-28902
In function read_yin_container() in libyang <= v1.0.225, it doesn't check...
High
7.5
CVE-2019-20398
A NULL pointer dereference is present in libyang before v1.0-r3...
Medium
6.5
Affected Vendor
cesnet
View all reports →Affected Software
libyang
Vulnerable Versions:
0
Timeline
Official Publish:
May 20th, 2021
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.