CVE-2021-28904: High severity CESNET libyang vulnerability

Q: What is CVE-2021-28904?

CVE-2021-28904 is a vulnerability in function ext_get_plugin() in libyang <= v1.0.225 that can lead to a crash due to a lack of NULL value check for the revision.

Q: How severe is CVE-2021-28904?

CVE-2021-28904 has a severity value of 7.5, categorized as high.

Q: What software versions are affected by CVE-2021-28904?

Versions up to and including 1.0.225 of Cesnet Libyang are affected by CVE-2021-28904.

Q: Is there a reference for CVE-2021-28904?

References for CVE-2021-28904 can be found at the CESNET Libyang GitHub page and the Gentoo Security Advisory.

Published May 20, 2021

Updated

In function extgetplugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmp(revision, extplugins[u].revision) will lead to a crash.

Affected Software

3 affected componentsFixes available

CESNET libyang<=1.0.225

alpine/libyang<1.0.184-r1

1.0.184-r1

alpine/libyang<1.0.215-r1

1.0.215-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade alpine/libyang to a version that resolves this vulnerability.
Fixed in 1.0.184-r1
Upgrade
Upgrade alpine/libyang to a version that resolves this vulnerability.
Fixed in 1.0.215-r1

Event History

May 20, 2021

CVE Published

via MITRE·06:36 PM

Data Sourced

via MITRE·06:36 PM

Description

Data Sourced

via OSV·07:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is CVE-2021-28904?

CVE-2021-28904 is a vulnerability in function ext_get_plugin() in libyang <= v1.0.225 that can lead to a crash due to a lack of NULL value check for the revision.

How severe is CVE-2021-28904?