VYPR

Piv Manager

by Yubico

CVEs (2)

  • CVE-2018-14779MedAug 15, 2018
    risk 0.44cvss 6.8epss 0.00

    A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `ykpiv_transfer_data()`: {% highlight c %} if(*out_len + recv_len - 2 > max_out) { fprintf(stderr, "Output buffer to small, wanted to…

  • CVE-2018-14780MedAug 15, 2018
    risk 0.30cvss 4.6epss 0.00

    An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `_ykpiv_fetch_object()`: {% highlight c %} if(sw == SW_SUCCESS) { size_t outlen; int offs = _ykpiv_get_length(data + 1, &outlen);…