The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the length of some operations including SSH signing requests, and some data operations received from a YubiHSM 2 device.
CPE | Name | Operator | Version |
---|---|---|---|
yubihsm_2_software_development_kit | le | 2021.08 |