| Package | Affected versions | Patched versions |
|---|---|---|
| libykpiv | < 2.1.0 | 2.1.0 |
| piv tool manager | < 2.0.0 | 2.0.0 |
| yubikey smart card minidriver | ≤ 4.1.0.172 |
An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. This could be used to cause a denial of service attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free