In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or possibly gain code execution.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4360 advisory.

    - Resolves: #1779573 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits     leaf type is used

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:4360 advisory.

  - libyang: stack-based buffer overflow in make_canonical when bits leaf type is used (CVE-2019-19333)

  - libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used (CVE-2019-19334)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:4360 advisory.

    The libyang package provides a library for YANG data modeling language. libyang is a YANG data modelling     language parser and toolkit written (and providing API) in C. The library is used e.g. in libnetconf2,     Netopeer2, sysrepo and FRRouting projects.

    Security Fix(es):

    * libyang: stack-based buffer overflow in make_canonical when bits leaf type is used (CVE-2019-19333)

    * libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used     (CVE-2019-19334)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    IMPORTANT:

    The libyang-devel sub-package has recently been removed from the AppStream repository. If you have     previously installed libyang-devel, remove it prior to applying this advisory to make the update     successful.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Rebase to version 1.0.101

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
180644	Oracle Linux 8 : libyang (ELSA-2019-4360)	Nessus	Oracle Linux Local Security Checks	critical
145626	CentOS 8 : libyang (CESA-2019:4360)	Nessus	CentOS Local Security Checks	critical
132382	RHEL 8 : libyang (RHSA-2019:4360)	Nessus	Red Hat Local Security Checks	critical
132120	Fedora 31 : libyang (2019-dfe0b42bc5)	Nessus	Fedora Local Security Checks	critical
132117	Fedora 30 : libyang (2019-9d83929ffa)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2019-19334

critical

Tenable Plugins

critical

critical

critical

critical

critical