Rezultati pretraživanja za 'Proizvođač: yubico'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-45678 | 4.2 | Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical access and expensive equipment) in which an electromagnetic side channel i | 2025-03-17 18:15:18 | 2024-09-03 20:15:08 |
| CVE-2021-3011 | 1.9 | An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive | 2024-02-15 21:20:33 | 2021-01-07 16:15:12 |
| CVE-2021-31924 | 4.6 | Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local PIN bypass. This issue does not allow user presence (touch) or cryptographic signature verification to be bypas | 2023-11-07 03:35:00 | 2021-05-26 00:15:00 |
| CVE-2021-28484 | 5.0 | An issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK before 2021.04). The handler did not validate the length of the request, which can lead to a state where yubihsm-connector becomes | 2023-11-07 03:32:00 | 2021-04-14 18:15:00 |
| CVE-2020-24388 | 5.0 | An issue was discovered in the _send_secure_msg() function of yubihsm-shell through 2.0.2. The function does not validate the embedded length field of a message received from the device. This could lead to an oversized memcpy() call that will crash t | 2023-11-07 03:19:00 | 2020-10-19 20:15:00 |
| CVE-2020-24387 | 5.0 | An issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2. The function does not explicitly check the returned session id from the device. An invalid session id would lead to out-of-bounds read and write operations in | 2023-11-07 03:19:00 | 2020-10-19 20:15:00 |
| CVE-2019-9578 | 5.0 | In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back to the device. | 2023-11-07 03:13:00 | 2019-03-05 23:29:00 |
| CVE-2019-12209 | 5.0 | Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabled), and does not properly verify that the path lacks symlinks pointing to other files on the system owned by | 2023-11-07 03:03:00 | 2019-06-04 21:29:00 |
| CVE-2015-3298 | 5.8 | Yubico ykneo-openpgp before 1.0.10 has a typo in which an invalid PIN can be used. When first powered up, a signature will be issued even though the PIN has not been validated. | 2022-04-08 14:46:00 | 2022-03-30 00:15:00 |
| CVE-2021-43399 | 7.8 | The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the length of some operations including SSH signing requests, and some data operations received from a YubiHSM 2 device. | 2022-04-04 14:04:00 | 2021-12-08 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/3
Zapisa po stranici: