CVE-2018-20340

MEDIUM

Yubico libu2f-host 1.1.6 - Buffer Overflow in devs.c via Malicious USB Token

Title source: llm
STIX 2.1

Description

Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is currently in use. It is not possible to perform this attack with a genuine YubiKey.

References (6)

Core 6
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202004-15
Mailing List, Third Party Advisory x_refsource_misc
https://seclists.org/bugtraq/2019/Feb/23
Third Party Advisory x_refsource_misc
https://www.debian.org/security/2019/dsa-4389
Patch, Vendor Advisory x_refsource_confirm
https://www.yubico.com/support/security-advisories/ysa-2019-01/
Release Notes, Vendor Advisory x_refsource_confirm
https://developers.yubico.com/libu2f-host/Release_Notes.html

Scores

CVSS v3 6.8
EPSS 0.0050
EPSS Percentile 39.0%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (2)
debian/debian_linux 9.0
yubico/libu2f-host 1.1.6
Published Mar 21, 2019
Tracked Since Feb 18, 2026