Lucene search

CVE-2020-13131

🗓️ 09 Jul 2020 18:10:15Reported by [email protected]Type

An issue in Yubico libykpiv before 2.1.0 allows a malicious PIV token to misreport length fields, potentially leaking sensitive information during RSA key generation

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2020-13131	9 Jul 202018:15	–	cve
UbuntuCve	CVE-2020-13131	9 Jul 202000:00	–	ubuntucve
Cvelist	CVE-2020-13131	9 Jul 202017:50	–	cvelist
Prion	Heap overflow	9 Jul 202018:15	–	prion
Debian CVE	CVE-2020-13131	9 Jul 202018:15	–	debiancve
Yubico	Security advisory YSA-2020-02, YSA-2020-03 \| Yubico \| YubiKey	14 Feb 202000:00	–	yubico

Nvd

Node

yubico libykpivRange<2.1.0

Node

yubico piv_tool_managerRange<2.0.0

Node

yubico yubikey_smart_card_minidriverRange≤4.1.0.172

Source	Link
blog	www.blog.inhq.net/posts/yubico-libykpiv-vuln/
yubico	www.yubico.com/products/services-software/download/smart-card-drivers-tools/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Jul 2020 18:15Current

CVSS21.9

CVSS34.3

EPSS0.001

CWE-125