Lucene search

K
osvGoogleOSV:USN-4846-1
HistoryMar 15, 2021 - 10:30 p.m.

yubico-piv-tool vulnerabilities

2021-03-1522:30:26
Google
osv.dev
4

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.2%

It was discovered that libykpiv, a supporting library of the Yubico PIV
tool and YubiKey PIV Manager, mishandled specially crafted input. An
attacker with a custom-made, malicious USB device could potentially execute
arbitrary code on a computer running the Yubico PIV Tool or Yubikey PIV
Manager.

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.2%