Yubico Libu2f-Host
2 CVEs affecting Yubico Libu2f-Host. Latest disclosed: 2019-03-21. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9578 | High | 7.5 | 2019-03-05 | In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back to the device. |
CVE-2018-20340 | Medium | 6.8 | 2019-03-21 | Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to… |