Cesnet vulnerabilities

Products

• Libyang 20

Newest

• cesnet netopeer2 netopeer2-server logging has format string vulnerability via subtree filter CVE-2026-63201 7.1 HighOctober 30, 2026
• cesnet libyang libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser CVE-2026-115327 Fix available 6.0 MediumOctober 22, 2026
• cesnet libyang libyang - Heap Use-After-Free Write in XML Metadata Parsing CVE-2026-41401 Fix available 6.9 MediumMay 26, 2026
• cesnet libyang, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 more libyang: lyb_read_string() integer overflow → heap buffer overflow CVE-2026-44673 Fix available 7.5 HighMay 14, 2026
• cesnet libyang libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the... CVE-2023-26917 Fix available 7.5 HighApril 11, 2023
• cesnet libyang, fedoraproject fedora +1 more libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the... CVE-2023-26916 Fix available 5.3 MediumApril 3, 2023
• cesnet theme-cesnet CESNET theme-cesnet resetpassword.php insufficiently protected credentials CVE-2016-15014 3.3 LowJanuary 7, 2023
• cesnet libyang In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval-... CVE-2021-28906 Fix available 7.5 HighMay 20, 2021
• cesnet libyang In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can... CVE-2021-28905 Fix available 7.5 HighMay 20, 2021
• cesnet libyang In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of... CVE-2021-28904 Fix available 7.5 HighMay 20, 2021
• cesnet libyang A stack overflow in libyang <= v1.0.225 can cause a denial of service through function... CVE-2021-28903 Fix available 7.5 HighMay 20, 2021
• cesnet libyang In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of... CVE-2021-28902 Fix available 7.5 HighMay 20, 2021
• cesnet perun LDAP connector injection in Perun CVE-2020-5281 6.2 MediumMarch 25, 2020
• cesnet libyang A NULL pointer dereference is present in libyang before v1.0-r3 in the function... CVE-2019-20398 Fix available 6.5 MediumJanuary 22, 2020
• cesnet libyang A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization... CVE-2019-20397 Fix available 8.8 HighJanuary 22, 2020
• cesnet libyang A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern... CVE-2019-20396 Fix available 6.5 MediumJanuary 22, 2020
• cesnet libyang A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union... CVE-2019-20395 Fix available 6.5 MediumJanuary 22, 2020
• cesnet libyang A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type... CVE-2019-20394 Fix available 8.8 HighJanuary 22, 2020
• cesnet libyang A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty... CVE-2019-20393 Fix available 8.8 HighJanuary 22, 2020
• cesnet libyang An invalid memory access flaw is present in libyang before v1.0-r1 in the function... CVE-2019-20392 Fix available 6.5 MediumJanuary 22, 2020
• cesnet libyang An invalid memory access flaw is present in libyang before v1.0-r3 in the function... CVE-2019-20391 Fix available 6.5 MediumJanuary 22, 2020
• cesnet libyang, fedoraproject fedora, redhat enterprise linux +2 more In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way... CVE-2019-19334 Fix available 8.1 HighDecember 6, 2019
• cesnet libyang, redhat enterprise linux +1 more In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way... CVE-2019-19333 Fix available 8.1 HighDecember 6, 2019
• cesnet proxystatistics SQL Injection in SimpleSAMLphp CVE-2019-15537 Fix available 9.8 CriticalAugust 23, 2019