CVE-2020-10184

🗓️ 05 Mar 2020 00:00:00Reported by ubuntu.comType

The YubiKey Validation Server before 2.40 allows remote attackers to cause a denial of service through SQL injection

Reporter	Title	Published	Views	Family All 11
Prion	Sql injection	5 Mar 202023:15	–	prion
Cvelist	CVE-2020-10184	5 Mar 202022:48	–	cvelist
CVE	CVE-2020-10184	5 Mar 202023:15	–	cve
OSV	CVE-2020-10184	5 Mar 202023:15	–	osv
OSV	yubikey-val - security update	13 Mar 202000:00	–	osv
Debian CVE	CVE-2020-10184	5 Mar 202023:15	–	debiancve
NVD	CVE-2020-10184	5 Mar 202023:15	–	nvd
OpenVAS	Debian: Security Advisory (DLA-2141-1)	18 Mar 202000:00	–	openvas
Yubico	Security advisory YSA-2020-01 \| Yubico	7 Jan 202000:00	–	yubico
Tenable Nessus	Debian DLA-2141-1 : yubikey-val security update	13 Mar 202000:00	–	nessus

Source	Link
yubico	www.yubico.com/support/security-advisories/ysa-2020-01/
github	www.github.com/Yubico/yubikey-val/commit/d0e4db3245deb5ce0c8d7d26069c78071a140286
github	www.github.com/Yubico/yubikey-val/releases/tag/yubikey-val-2.40
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-10184
launchpad	www.launchpad.net/bugs/cve/CVE-2020-10184
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-10184

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	yubikey-val	any	UNKNOWN
ubuntu	16.04	noarch	yubikey-val	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Mar 2020 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS25.0

CVSS37.5

EPSS0.002