Denial of Service Vulnerability in Yubihsm-shell by Yubico
CVE-2020-24388

7.5HIGH

Key Information:

Vendor: Yubico
Status: Yubihsm-shell
Vendor: CVE Published:; 19 October 2020

What is CVE-2020-24388?

A vulnerability in the _send_secure_msg() function of Yubico's yubihsm-shell allows for unmatched length field validation in messages from the device. This oversight can lead to oversized memory copy operations, potentially crashing the process. As a result, attackers could exploit this flaw to induce a denial of service, affecting system availability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch