Yubico-Piv Buffer Overflow Vulnerability

Yubico-Piv is a tool for interacting with YubiKey's Identity Card PIV application. A buffer overflow vulnerability exists in the 'ykpivtransferdata' function in the lib/ykpiv.c file in Yubico-Piv version 1.5.0, which stems from the program's lack of an error handling mechanism. The vulnerability...

PT-2018-12717

Name of the Vulnerable Software and Affected Versions Yubico-Piv version 1.5.0 Description A buffer overflow issue was discovered in the Yubico-Piv smartcard driver. The issue arises from the ykpiv transfer data function in the lib/ykpiv.c file, where the code checks if the output buffer is too...