PT-2018-2972 · Yubico+1 · Libu2F-Host+1

Christian Reitter · Published 2018-12-18 · Updated 2021-07-10 · CVE-2018-20340

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Yubico libu2f-host version 1.1.6

Description The issue is related to unchecked buffers in the devs.c file, which could lead to a buffer overflow. This could allow a malicious token to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is in use. The attack cannot be performed with a genuine YubiKey. The vulnerability is associated with a buffer overflow in the dev.c software, which may allow an attacker to execute arbitrary code.

Recommendations For Yubico libu2f-host version 1.1.6, consider disabling the use of the devs.c file or restricting access to the library until a patch is available. As a temporary workaround, avoid using the affected library with untrusted USB devices. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2019-02907

CVE-2018-20340

DSA-4389-1

OPENSUSE-SU-2019:1475-1

OPENSUSE-SU-2019_0199-1

OPENSUSE-SU-2019_1475-1

OPENSUSE-SU-2021:0799-1

OPENSUSE-SU-2021:1755-1

OPENSUSE-SU-2021_0799-1

OPENSUSE-SU-2021_1755-1

SUSE-SU-2019:1340-1

SUSE-SU-2019:1749-1

SUSE-SU-2019_1340-1

SUSE-SU-2019_1749-1

SUSE-SU-2021:1755-1

SUSE-SU-2021_1755-1

Affected Products

Suse

Libu2F-Host

References · 37

• https://osv.dev/vulnerability/SUSE-SU-2021:1755-1 · Vendor Advisory
• https://debian.org/security/2019/dsa-4389 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-20340 · Vendor Advisory
• https://security.gentoo.org/glsa/202004-15 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02907 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-20340 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2019:1475-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4389-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-20340 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:1755-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1749-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-20340 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-20340 · Vendor Advisory
• https://developers.yubico.com/libu2f-host/Release_Notes.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1340-1 · Vendor Advisory