Lucene search
GoogleOSV:CVE-2019-9578HistoryMar 05, 2019 - 11:29 p.m.
CVE-2019-9578
2019-03-0523:29:02
Google
osv.dev
5
In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back to the device.
References
lists.opensuse.org/opensuse-security-announce/2019-07/msg00012.html
lists.opensuse.org/opensuse-security-announce/2019-07/msg00018.html
blog.inhq.net/posts/yubico-libu2f-host-vuln-part2/
developers.yubico.com/libu2f-host/Release_Notes.html
github.com/Yubico/libu2f-host/commit/e4bb58cc8b6202a421e65f8230217d8ae6e16eb5
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMA4H6AZFYIR3LA5VKKEJZNCCIVMUCFQ/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S4YCFMSNMXZ7XC4U6WXPQA7JCXC6VOAJ/
security.gentoo.org/glsa/202004-15
Related
fedora
fedora
[SECURITY] Fedora 29 Update: libu2f-host-1.1.8-1.fc29
2019-05-19 10:27:18
[SECURITY] Fedora 30 Update: libu2f-host-1.1.8-1.fc30
2019-04-09 00:04:16
redhatcve
redhatcve
CVE-2019-9578
2022-05-20 23:56:13
ubuntucve
ubuntucve
CVE-2019-9578
2019-03-05 00:00:00
prion
prion
Memory corruption
2019-03-05 23:29:00
nvd
nvd
CVE-2019-9578
2019-03-05 23:29:02
nessus
nessus
Fedora 30 : libu2f-host (2019-fe6d1fbffa)
2019-05-02 00:00:00
openSUSE Security Update : libu2f-host (openSUSE-2021-799)
2021-06-01 00:00:00
SUSE SLED15 / SLES15 Security Update : libu2f-host (SUSE-SU-2021:1755-1)
2021-05-26 00:00:00
debiancve
debiancve
CVE-2019-9578
2019-03-05 23:29:02
openvas
openvas
Fedora Update for libu2f-host FEDORA-2019-4d83e78ad8
2019-05-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:1755-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for libu2f-host (openSUSE-SU-2021:0799-1)
2021-05-29 00:00:00
cve
cve
CVE-2019-9578
2019-03-05 23:29:02
cvelist
cvelist
CVE-2019-9578
2019-03-05 23:00:00
suse
suse
Security update for libu2f-host (moderate)
2021-05-28 00:00:00
Security update for libu2f-host (moderate)
2021-07-11 00:00:00
Security update for libu2f-host, pam_u2f (moderate)
2019-07-19 00:00:00
gentoo
gentoo
libu2f-host: Multiple vulnerabilities
2020-04-30 00:00:00