PatchTheCVEcesnet vulnerabilities
Recent CVEs affecting cesnet products. 3 tracked.
cesnet has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-04-11. Highest priority: CVE-2023-26917 (score 51/100).
- CVE-2023-26917 HIGH 7.5 UPGRADE libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_st
- CVE-2023-26916 MEDIUM 5.3 UPGRADE MITIGATE libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_par
- CVE-2016-15014 LOW 3.3 UPGRADE A vulnerability has been found in CESNET theme-cesnet up to 1.x on ownCloud and classified as problematic
FAQ
How do I fix cesnet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cesnet being exploited right now?
None of the tracked cesnet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cesnet CVE should I patch first?
CVE-2023-26917 currently ranks highest (51/100): libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_st.