Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mg7w-vxv4-393q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. This could be used to cause a denial of service attack.

An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. This could be used to cause a denial of service attack.

EPSS

Процентиль: 17%
0.00056
Низкий

Дефекты

CWE-327

Связанные уязвимости

CVSS3: 4.6
ubuntu
больше 5 лет назад

An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. This could be used to cause a denial of service attack.

CVSS3: 4.6
nvd
больше 5 лет назад

An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. This could be used to cause a denial of service attack.

CVSS3: 4.6
debian
больше 5 лет назад

An issue was discovered in Yubico libykpiv before 2.1.0. An attacker c ...

EPSS

Процентиль: 17%
0.00056
Низкий

Дефекты

CWE-327