CVE:CVE-2019-20395
CNNVD:CNNVD-202001-1025
libyang是一款使用C语言编写的YANG数据建模语言解析器和工具包。
libyang 1.0-r1之前版本中存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。
solution:Upgrade cesnet libyang to a higher version than 0.11:r1,0.11:r2,0.12:r1,0.12:r2,0.13:r1,0.13:r2,0.14:r1,0.15:r1,0.16:r1,0.16:r2,0.16:r3,and avoid the version 0.11:r1,0.11:r2,0.12:r1,0.12:r2,0.13:r1,0.13:r2,0.14:r1,0.15:r1,0.16:r1,0.16:r2,0.16:r3