Wind River Support Network

HomeDefectsLIN1021-4711

Fixed

LIN1021-4711 : Security Advisory - libyang - CVE-2021-37793

Created: Nov 2, 2022 Updated: Mar 1, 2023

Resolved Date: Mar 1, 2023

Found In Version: 10.21.20.1

Fix Version: 10.21.20.17

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

When fuzzing the lys_parse_fd function, double free is found, causing a crash. 

https://github.com/CESNET/libyang/issues/1668

CREATE(Triage):(User=admin) CVE-2021-37793 (https://nvd.nist.gov/vuln/detail/CVE-2021-37793)

CVEs

CVE-2021-37793