CVE-2023-39908

The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata

published August 14, 2023

CVSS
—
EPSS
1%
Percentile
46.7
In the wild
Unconfirmed
What it is

The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. This may lead to disclosure of uninitialized and previously used memory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00575 · 46.7th percentile
Published
2023-08-14T00:00Z
EPSS history
Timeline
  • 14 AUG 00:00Z
    The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata
    cvelistv5