An issue exists in the yh_create_session() function of yubihsm-shell up to and including 2.0.2. The function does not explicitly check the returned session id from the device. An invalid session id would lead to out-of-bounds read and write operations in the session array. This could be used by an malicious user to cause a denial of service attack.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
yubico yubihsm-shell |
||
fedoraproject fedora 33 |