Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:0199-1

Опубликовано: 18 фев. 2019
Источник: suse-cvrf

Описание

Security update for libu2f-host

This update for libu2f-host fixes the following issues:

Security issue fixed:

  • CVE-2018-20340: Fixed an unchecked buffer, which could allow a buffer overflow with a custom made malicious USB device (bsc#1124781).

Список пакетов

openSUSE Leap 42.3
libu2f-host-1.0.0-5.3.1
libu2f-host-devel-1.0.0-5.3.1
libu2f-host-doc-1.0.0-5.3.1
libu2f-host0-1.0.0-5.3.1
u2f-host-1.0.0-5.3.1

Ссылки

Описание

Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is currently in use. It is not possible to perform this attack with a genuine YubiKey.

Затронутые продукты
openSUSE Leap 42.3:libu2f-host-1.0.0-5.3.1
openSUSE Leap 42.3:libu2f-host-devel-1.0.0-5.3.1
openSUSE Leap 42.3:libu2f-host-doc-1.0.0-5.3.1
openSUSE Leap 42.3:libu2f-host0-1.0.0-5.3.1
Ссылки