PT-2020-15725

Name of the Vulnerable Software and Affected Versions yubihsm-shell versions prior to 2.0.3 Description An issue was discovered in the send secure msg function. The function does not validate the embedded length field of a message received from the device, which could lead to an oversized memcpy...