Wind River Support Network

HomeDefectsLIN1022-2325

Fixed

LIN1022-2325 : Security Advisory - libyang - CVE-2021-37793

Created: Nov 2, 2022 Updated: Mar 22, 2023

Resolved Date: Mar 22, 2023

Found In Version: 10.22.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

When fuzzing the lys_parse_fd function, double free is found, causing a crash. 

https://github.com/CESNET/libyang/issues/1668

CREATE(Triage):(User=admin) CVE-2021-37793 (https://nvd.nist.gov/vuln/detail/CVE-2021-37793)