Yubico Yubihsm-Shell
4 CVEs affecting Yubico Yubihsm-Shell. Latest disclosed: 2021-05-10. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-24388 | High | 7.5 | 2020-10-19 | An issue was discovered in the _send_secure_msg() function of yubihsm-shell through 2.0.2. The function does not validate the embedded length field of a messag… |
CVE-2020-24387 | High | 7.5 | 2020-10-19 | An issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2. The function does not explicitly check the returned session id from… |
CVE-2021-32489 | Medium | 4.4 | 2021-05-10 | An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length… |
CVE-2021-27217 | Medium | 4.4 | 2021-03-04 | An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length… |