A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lysparsepath parsing.
{ "vanir_signatures": [ { "target": { "file": "src/parser_yang_bis.c", "function": "yyparse" }, "signature_version": "v1", "id": "CVE-2019-20396-34ee9590", "digest": { "length": 121387.0, "function_hash": "77555260869703791548682690774890099272" }, "deprecated": false, "source": "https://github.com/cesnet/libyang/commit/a1f17693904ed6fecc8902c747fc50a8f20e6af8", "signature_type": "Function" }, { "target": { "file": "src/parser_yang_bis.c" }, "signature_version": "v1", "id": "CVE-2019-20396-7b4151cd", "digest": { "threshold": 0.9, "line_hashes": [ "8951943926037236718842534528035772412", "186241053998576123766993079963883627801", "263516074267876542474601258196836796276", "175814208747679021527942933567404922335" ] }, "deprecated": false, "source": "https://github.com/cesnet/libyang/commit/a1f17693904ed6fecc8902c747fc50a8f20e6af8", "signature_type": "Line" } ] }