Github.Com Yubico Yubihsm-Connector vulnerabilities

1 known vulnerability affecting github.com/yubico_yubihsm-connector.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2021-28484HIGH≥ 0, < 3.0.12022-02-15

CVE-2021-28484 [HIGH] CWE-835 Infinite loop in Yubico yubihsm-connector Infinite loop in Yubico yubihsm-connector An issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK before 2021.04). The handler did not validate the length of the request, which can lead to a state where yubihsm-connector becomes stuck in a loop waiting for the YubiHSM to send it data, preventing any further operations until the yubihsm-connector is restarted. A