Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: yubico'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2018-14780 2.1 An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `_ykpiv_fetch_object()`: {% highlight c %} if(sw == SW_SUCCESS) { size_t outlen; int offs = _ykpiv_g 2020-02-25 04:15:00
CVE-2018-14779 7.2 A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `ykpiv_transfer_data()`: {% highlight c %} if(*out_len + recv_len - 2 > max_out) { fprintf(stderr, "Outp 2020-02-25 04:15:00
CVE-2018-20340 4.6 Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security to 2019-12-05 17:15:00
CVE-2018-9275 6.4 In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to information disclosure (serial number of a device) and/or DoS (reaching 2018-05-21 15:33:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/3
Zapisa po stranici: