Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1475-1

Опубликовано: 30 мая 2019
Источник: suse-cvrf

Описание

Security update for libu2f-host

This update for libu2f-host fixes the following issues:

Security issue fixed:

  • CVE-2018-20340: Fixed an unchecked buffer, which could allow a buffer overflow with a custom made malicious USB device (bsc#1124781).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
libu2f-host-devel-1.1.6-lp151.2.3.1
libu2f-host-doc-1.1.6-lp151.2.3.1
libu2f-host0-1.1.6-lp151.2.3.1
u2f-host-1.1.6-lp151.2.3.1
openSUSE Leap 15.1
libu2f-host-devel-1.1.6-lp151.2.3.1
libu2f-host-doc-1.1.6-lp151.2.3.1
libu2f-host0-1.1.6-lp151.2.3.1
u2f-host-1.1.6-lp151.2.3.1

Ссылки

Описание

Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is currently in use. It is not possible to perform this attack with a genuine YubiKey.

Затронутые продукты
openSUSE Leap 15.0:libu2f-host-devel-1.1.6-lp151.2.3.1
openSUSE Leap 15.0:libu2f-host-doc-1.1.6-lp151.2.3.1
openSUSE Leap 15.0:libu2f-host0-1.1.6-lp151.2.3.1
openSUSE Leap 15.0:u2f-host-1.1.6-lp151.2.3.1
Ссылки