CVE-2019-20396

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-20396
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-20396.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-20396
Downstream
Published
2020-01-22T22:15:10Z
Modified
2026-08-07T16:50:45Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing.

References

Affected packages

Git / github.com/cesnet/libyang

Affected ranges

Type
GIT
Repo
https://github.com/cesnet/libyang
Events
Introduced
14a95280b2bd77b5fd1d9b5f8af71b15679f1a8f
Last Affected
9e316f344e73316bf058ef88bd5ba852ad65ba25
Fixed
a1f17693904ed6fecc8902c747fc50a8f20e6af8
Database specific
Show details 
{
    "cpe":  [
        "cpe:2.3:a:cesnet:libyang:0.11:r1:*:*:*:*:*:*",
        "cpe:2.3:a:cesnet:libyang:0.11:r2:*:*:*:*:*:*",
        "cpe:2.3:a:cesnet:libyang:0.12:r1:*:*:*:*:*:*",
        "cpe:2.3:a:cesnet:libyang:0.12:r2:*:*:*:*:*:*",
        "cpe:2.3:a:cesnet:libyang:0.13:r1:*:*:*:*:*:*",
        "cpe:2.3:a:cesnet:libyang:0.13:r2:*:*:*:*:*:*",
        "cpe:2.3:a:cesnet:libyang:0.14:r1:*:*:*:*:*:*",
        "cpe:2.3:a:cesnet:libyang:0.15:r1:*:*:*:*:*:*",
        "cpe:2.3:a:cesnet:libyang:0.16:r1:*:*:*:*:*:*",
        "cpe:2.3:a:cesnet:libyang:0.16:r2:*:*:*:*:*:*",
        "cpe:2.3:a:cesnet:libyang:0.16:r3:*:*:*:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "0.11-r1"
        },
        {
            "last_affected":  "0.11-r1"
        },
        {
            "introduced":  "0.11-r2"
        },
        {
            "last_affected":  "0.11-r2"
        },
        {
            "introduced":  "0.12-r1"
        },
        {
            "last_affected":  "0.12-r1"
        },
        {
            "introduced":  "0.12-r2"
        },
        {
            "last_affected":  "0.12-r2"
        },
        {
            "introduced":  "0.13-r1"
        },
        {
            "last_affected":  "0.13-r1"
        },
        {
            "introduced":  "0.13-r2"
        },
        {
            "last_affected":  "0.13-r2"
        },
        {
            "introduced":  "0.14-r1"
        },
        {
            "last_affected":  "0.14-r1"
        },
        {
            "introduced":  "0.15-r1"
        },
        {
            "last_affected":  "0.15-r1"
        },
        {
            "introduced":  "0.16-r1"
        },
        {
            "last_affected":  "0.16-r1"
        },
        {
            "introduced":  "0.16-r2"
        },
        {
            "last_affected":  "0.16-r2"
        },
        {
            "introduced":  "0.16-r3"
        },
        {
            "last_affected":  "0.16-r3"
        }
    ],
    "source":  [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

0.*
0.11-r1
0.11-r2
0.12-r1
0.12-r2
0.13-r1
0.13-r2
0.14-r1
0.15-r1
0.16-r1
0.16-r2
0.16-r3
v0.*
v0.11-r1
v0.11-r2
v0.12-r1
v0.12-r2
v0.13-r2
v0.14-r1
v0.15-r1
v0.16-r1
v0.16-r2
v0.16-r3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-20396.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "77555260869703791548682690774890099272",
            "length":  121387
        },
        "id":  "CVE-2019-20396-34ee9590",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/cesnet/libyang/commit/a1f17693904ed6fecc8902c747fc50a8f20e6af8",
        "target":  {
            "file":  "src/parser_yang_bis.c",
            "function":  "yyparse"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "8951943926037236718842534528035772412",
                "186241053998576123766993079963883627801",
                "263516074267876542474601258196836796276",
                "175814208747679021527942933567404922335"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2019-20396-7b4151cd",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/cesnet/libyang/commit/a1f17693904ed6fecc8902c747fc50a8f20e6af8",
        "target":  {
            "file":  "src/parser_yang_bis.c"
        }
    }
]
vanir_signatures_modified 
"2026-08-07T16:50:45Z"