CVE-2023-39908

2023-08-1400:00:00

mitre

www.cve.org

yubihsm 2 sdk

pkcs11

module vulnerability

0.001 Low

EPSS

Percentile

37.4%

JSON

The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. This may lead to disclosure of uninitialized and previously used memory.

References

blog.inhq.net/posts/yubico-yubihsm-pkcs-vuln/

www.yubico.com/support/security-advisories/ysa-2023-01/

0.001 Low

EPSS

Percentile

37.4%

JSON

Related for CVELIST:CVE-2023-39908