Bug 2558847 (CVE-2026-115327)
| Summary: | CVE-2026-115327 libyang: libyang: Denial of Service via crafted NETCONF RPC action envelope | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in libyang. An uninitialized pointer free vulnerability occurs during the processing of Network Configuration Protocol (NETCONF) Remote Procedure Call (RPC) action envelopes. An authenticated remote attacker with an established NETCONF session can trigger this flaw by sending a specially crafted action request containing unexpected text data. Successful exploitation can lead to a Denial of Service (DoS) through application crashes or cause memory corruption.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2559113, 2559114, 2559115 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-22 11:05:49 UTC
|