Linux Distros Unpatched Vulnerability : CVE-2020-13131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library which is included in yubico-piv-tool does not properly check embedded length...

CVE-2020-13131

CVE-2020-13131 affects Yubico libykpiv before 2.1.0. The bug in lib/util.c mishandles embedded length fields during device communication, allowing a malicious PIV token to misreport lengths during RSA key generation. This can copy stack memory into heap memory returned to the caller, potentially ...