Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:1340-1

Опубликовано: 24 мая 2019
Источник: suse-cvrf

Описание

Security update for libu2f-host

This update for libu2f-host fixes the following issues:

Security issue fixed:

  • CVE-2018-20340: Fixed an unchecked buffer, which could allow a buffer overflow with a custom made malicious USB device (bsc#1124781).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15
libu2f-host-devel-1.1.6-3.3.3
libu2f-host0-1.1.6-3.3.3

Ссылки

Описание

Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is currently in use. It is not possible to perform this attack with a genuine YubiKey.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15:libu2f-host-devel-1.1.6-3.3.3
SUSE Linux Enterprise Module for Basesystem 15:libu2f-host0-1.1.6-3.3.3
Ссылки