CVE-2019-9578

🗓️ 05 Mar 2019 23:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 171 Views

Misparse in Yubico libu2f-host leads to stack memory leak

Reporter	Title	Published	Views	Family All 42
Cvelist	CVE-2019-9578	5 Mar 201923:00	–	cvelist
Debian CVE	CVE-2019-9578	5 Mar 201923:00	–	debiancve
EUVD	EUVD-2019-18949	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 29 Update: libu2f-host-1.1.8-1.fc29	19 May 201910:27	–	fedora
Fedora	[SECURITY] Fedora 30 Update: libu2f-host-1.1.8-1.fc30	9 Apr 201900:04	–	fedora
Tenable Nessus	Fedora 30 : libu2f-host (2019-fe6d1fbffa)	2 May 201900:00	–	nessus
Tenable Nessus	GLSA-202004-15 : libu2f-host: Multiple vulnerabilities	1 May 202000:00	–	nessus
Tenable Nessus	openSUSE Security Update : libu2f-host / pam_u2f (openSUSE-2019-1708)	22 Jul 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : libu2f-host / pam_u2f (openSUSE-2019-1725)	22 Jul 201900:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : libu2f-host (openSUSE-SU-2021:1755-1)	16 Jul 202100:00	–	nessus

NVD

Node

yubico libu2f-hostRange<1.1.8

Source	Link
blog	www.blog.inhq.net/posts/yubico-libu2f-host-vuln-part2/
developers	www.developers.yubico.com/libu2f-host/Release_Notes.html
security	www.security.gentoo.org/glsa/202004-15
lists	www.lists.opensuse.org/opensuse-security-announce/2019-07/msg00012.html
github	www.github.com/Yubico/libu2f-host/commit/e4bb58cc8b6202a421e65f8230217d8ae6e16eb5
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S4YCFMSNMXZ7XC4U6WXPQA7JCXC6VOAJ/
lists	www.lists.opensuse.org/opensuse-security-announce/2019-07/msg00018.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMA4H6AZFYIR3LA5VKKEJZNCCIVMUCFQ/

21 Nov 2024 04:51Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 37.5

EPSS0.01445

yubico libu2f-host cve-2019-9578 security vulnerability stack memory leak