Unscored DLA-2141-1 2 CVEs

yubikey-val - security update

Published Mar 13, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	yubikey-val	2.27-1+deb8u1

Vulnerabilities 2

Unscored —

CVE-2020-10184

The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows rem…

yubikey-val Ubuntu

Mar 5, 2020
Unscored —

CVE-2020-10185

The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue i…

yubikey-val Ubuntu

Mar 5, 2020