In function ext_get_plugin() in libyang <= v1.0.225, it doesnt check whether the value of revision is NULL. If revision is NULL, the operation of strcmp(revision, ext_plugins[u].revision) will lead to a crash.
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libyang | Cesnet | * | 1.0.225 (including) |
| Libyang | Ubuntu | esm-apps/focal | * |
| Libyang | Ubuntu | focal | * |
| Libyang | Ubuntu | groovy | * |
| Libyang | Ubuntu | hirsute | * |
| Libyang | Ubuntu | trusty | * |
| Libyang | Ubuntu | upstream | * |
| Libyang | Ubuntu | xenial | * |