PT-2021-19727

Name of the Vulnerable Software and Affected Versions: Yubico yubihsm-shell versions 2.0.0 through 2.0.3 Description: An issue was discovered in the send secure msg function. The function does not correctly validate the embedded length field of an authenticated message received from the device,...

PT-2021-17330

Name of the Vulnerable Software and Affected Versions: Yubico yubihsm-shell versions 2.0.0 through 2.0.3 Description: An issue was discovered in the send secure msg function. The function does not correctly validate the embedded length field of an authenticated message received from the device...

PT-2020-15725

Name of the Vulnerable Software and Affected Versions yubihsm-shell versions prior to 2.0.3 Description An issue was discovered in the send secure msg function. The function does not validate the embedded length field of a message received from the device, which could lead to an oversized memcpy...