high7.5
CVE-2023-39908
The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata.
Impact
The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. This may lead to disclosure of uninitialized and previously used memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yubico | Yubihsm 2 Sdk | before 2023.08 |