CVE-2021-43399: High severity yubico yubihsm 2 sdk vulnerability
Published Dec 8, 2021
·Updated
The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the length of some operations including SSH signing requests, and some data operations received from a YubiHSM 2 device.
Affected Software
1 affected component
Yubico Yubihsm 2 Software Development Kit<=2021.08
Event History
Dec 8, 2021
CVE Published
via MITRE·06:31 PM
Data Sourced
via MITRE·06:31 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-43399.
2
What is the severity of CVE-2021-43399?
The severity of CVE-2021-43399 is high with a CVSS score of 7.5.
3
What is the affected software for CVE-2021-43399?
The affected software for CVE-2021-43399 is Yubico Yubihsm 2 Software Development Kit version 2021.08.
4
What is the CWE ID for CVE-2021-43399?
The CWE ID for CVE-2021-43399 is CWE-787.
5
How can I fix CVE-2021-43399?
To fix CVE-2021-43399, it is recommended to update to a patched version of the Yubico YubiHSM YubiHSM2 library and follow any provided instructions from Yubico.