Description
The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. This may lead to disclosure of uninitialized and previously used memory.
Unscored
CVE-2023-39908
EUVD-2023-43608GHSA-m369-7f44-fp6w
The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata…
Published Aug 14, 2023 · Updated Oct 9, 2024 · Assigned by mitre