Vulnerability Name:

CVE-2018-14780 (CCN-148367)

Assigned:2018-08-14
Published:2018-08-14
Updated:2020-02-25
Summary:An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `_ykpiv_fetch_object()`: {% highlight c %} if(sw == SW_SUCCESS) { size_t outlen; int offs = _ykpiv_get_length(data + 1, &outlen); if(offs == 0) { return YKPIV_SIZE_ERROR; } memmove(data, data + 1 + offs, outlen); *len = outlen; return YKPIV_OK; } else { return YKPIV_GENERIC_ERROR; } {% endhighlight %} -- in the end, a `memmove()` occurs with a length retrieved from APDU data. This length is not checked for whether it is outside of the APDU data retrieved. Therefore the `memmove()` could copy bytes behind the allocated data buffer into this buffer.
CVSS v3 Severity:4.6 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
4.0 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Physical
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): None
Availibility (A): None
2.2 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N)
2.0 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Physical
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): Low
Integrity (I): None
Availibility (A): None
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
1.2 Low (CCN CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
Vulnerability Type:CWE-125
Vulnerability Consequences:Obtain Information
References:Source: MITRE
Type: CNA
CVE-2018-14780

Source: CCN
Type: BugTraq Mailing List, Tue, 14 Aug 2018 15:28:03 +0200
X41 D-Sec GmbH Security Advisory X41-2018-001: Multiple Vulnerabilities in Yubico Piv

Source: MLIST
Type: Mailing List, Third Party Advisory
[oss-security] 20180814 X41 D-Sec GmbH Security Advisory X41-2018-001: Multiple Vulnerabilities in Yubico Piv

Source: XF
Type: UNKNOWN
yubico-cve201814780-info-disc(148367)

Source: UBUNTU
Type: UNKNOWN
USN-4276-1

Source: MISC
Type: Third Party Advisory
https://www.x41-dsec.de/lab/advisories/x41-2018-001-Yubico-Piv/

Source: CCN
Type: Yubico Security Advisory 2018-08-08
Unchecked Buffer in libykpiv

Source: CONFIRM
Type: Vendor Advisory
https://www.yubico.com/support/security-advisories/ysa-2018-03/

Vulnerable Configuration:Configuration 1:
  • cpe:/a:yubico:piv_manager:*:*:*:*:*:*:*:* (Version < 1.4.2)
  • OR cpe:/a:yubico:piv_manager:1.4.2b:*:*:*:*:*:*:*
  • OR cpe:/a:yubico:piv_manager:1.4.2c:*:*:*:*:*:*:*
  • OR cpe:/a:yubico:piv_manager:1.4.2d:*:*:*:*:*:*:*
  • OR cpe:/a:yubico:piv_manager:1.4.2e:*:*:*:*:*:*:*
  • OR cpe:/a:yubico:piv_manager:1.4.2f:*:*:*:*:*:*:*
  • OR cpe:/a:yubico:piv_manager:1.4.2g:*:*:*:*:*:*:*
  • OR cpe:/a:yubico:piv_tool:*:*:*:*:*:*:*:* (Version < 1.6.0)
  • OR cpe:/a:yubico:smart_card_minidriver:*:*:*:*:*:*:*:* (Version <= 3.7.3.160)

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:201814780
    V
    CVE-2018-14780
    2023-06-22
    oval:org.opensuse.security:def:8205
    P
    Security update for MozillaThunderbird (Important) (in QA)
    2023-06-13
    oval:org.opensuse.security:def:7575
    P
    libarchive-devel-3.5.1-150400.3.12.1 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:7597
    P
    libidn-devel-1.34-3.2.2 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:7707
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:3114
    P
    java-1_8_0-ibm-1.8.0_sr5.40-30.54.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:123872
    P
    libykcs11-1-1.5.0-3.16 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:124269
    P
    libykcs11-1-1.5.0-3.16 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3292
    P
    libykcs11-1-1.5.0-3.16 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:94744
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:234
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2022-06-13
    oval:org.opensuse.security:def:510
    P
    Security update for MozillaFirefox (Important)
    2022-06-02
    oval:org.opensuse.security:def:1163
    P
    Security update for git (Important)
    2022-05-02
    oval:org.opensuse.security:def:6325
    P
    Security update for python (Moderate)
    2022-04-08
    oval:org.opensuse.security:def:6198
    P
    Security update for java-1_8_0-openjdk (Important)
    2022-03-16
    oval:org.opensuse.security:def:6176
    P
    Security update for gnutls (Moderate)
    2022-03-02
    oval:org.opensuse.security:def:6168
    P
    Security update for polkit (Moderate)
    2022-02-18
    oval:org.opensuse.security:def:112937
    P
    libykcs11-2-2.2.0-1.5 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:6291
    P
    Security update for MozillaFirefox (Important) (in QA)
    2022-01-14
    oval:org.opensuse.security:def:55319
    P
    Security update for libsndfile (Important)
    2022-01-05
    oval:org.opensuse.security:def:8694
    P
    Security update for p11-kit (Important)
    2021-12-22
    oval:org.opensuse.security:def:6489
    P
    Security update for postgresql10 (Important)
    2021-12-14
    oval:org.opensuse.security:def:1294
    P
    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP3) (Important)
    2021-12-14
    oval:org.opensuse.security:def:826
    P
    Security update for gmp (Moderate)
    2021-12-06
    oval:org.opensuse.security:def:8875
    P
    Security update for clamav (Moderate)
    2021-12-06
    oval:org.opensuse.security:def:6244
    P
    Security update for python-Pygments (Important)
    2021-12-01
    oval:org.opensuse.security:def:8328
    P
    Security update for samba (Important)
    2021-11-16
    oval:org.opensuse.security:def:6306
    P
    Security update for pcre (Moderate)
    2021-11-10
    oval:org.opensuse.security:def:8850
    P
    Security update for python-Pygments (Important)
    2021-10-20
    oval:org.opensuse.security:def:6458
    P
    Security update for ncurses (Moderate)
    2021-10-20
    oval:org.opensuse.security:def:9599
    P
    Security update for glibc (Moderate)
    2021-10-12
    oval:org.opensuse.security:def:106392
    P
    libykcs11-2-2.2.0-1.5 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:71340
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:61470
    P
    iputils-s20161105-6.10 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:96719
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:89754
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:61469
    P
    ipsec-tools-0.8.2-5.35 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:61599
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:63203
    P
    dpdk-18.11-2.43 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:61662
    P
    sysstat-12.0.2-3.6.12 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:103409
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:61493
    P
    libXi-devel-1.7.9-1.23 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:55245
    P
    Security update for gtk-vnc (Moderate)
    2021-09-16
    oval:org.opensuse.security:def:8648
    P
    Security update for ffmpeg (Important)
    2021-09-02
    oval:org.opensuse.security:def:69918
    P
    Security update for openssl-1_0_0 (Important)
    2021-08-24
    oval:org.opensuse.security:def:9577
    P
    Security update for spice-vdagent (Moderate)
    2021-08-20
    oval:org.opensuse.security:def:7149
    P
    Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP2) (Important)
    2021-08-17
    oval:org.opensuse.security:def:47360
    P
    libjasper1-1.900.14-194.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:48030
    P
    grub2-2.02-12.15.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:48272
    P
    pigz-2.3-5.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47811
    P
    libwireshark9-2.4.9-48.29.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47167
    P
    tftp-5.2-10.3 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:48231
    P
    libykcs11-1-1.5.0-3.16 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47946
    P
    apache-commons-beanutils-1.9.2-3.3.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:15111
    P
    libykcs11-1-1.5.0-3.16 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:48140
    P
    liblcms1-1.19-17.28 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:48259
    P
    pam_yubico-2.26-1.25 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47046
    P
    liblzo2-2-2.08-1.13 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47732
    P
    libksba8-1.3.0-23.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47947
    P
    apache-commons-daemon-1.0.15-6.10 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:48188
    P
    libruby2_1-2_1-2.1.9-18.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47032
    P
    libipa_hbac0-1.13.4-18.10 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47584
    P
    cups-1.7.5-20.17.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47826
    P
    mariadb-10.2.18-1.7 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:48157
    P
    libnghttp2-14-1.7.1-1.84 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47492
    P
    rpm-32bit-4.11.2-15.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47812
    P
    libxcb-dri2-0-1.10-4.3.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47031
    P
    libimobiledevice6-1.2.0-7.31 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:48092
    P
    libapr-util1-1.5.3-2.8.1 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:87859
    P
    libykcs11-1-1.5.0-3.16 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:47818
    P
    libykcs11-1-1.5.0-3.16 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:14698
    P
    libykcs11-1-1.5.0-3.16 on GA media (Moderate)
    2021-08-16
    oval:org.opensuse.security:def:6476
    P
    Security update for the Linux Kernel (Important)
    2021-08-14
    oval:org.opensuse.security:def:62252
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:1932
    P
    libpcp-devel-4.3.1-3.11.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62259
    P
    login_defs-4.8.1-2.43 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62129
    P
    libXrandr-devel-1.5.1-2.17 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:63020
    P
    libgit2-28-0.28.4-1.28 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:71993
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62788
    P
    libical-devel-3.0.6-4.3.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:8626
    P
    Security update for MozillaFirefox (Important)
    2021-07-27
    oval:org.opensuse.security:def:6692
    P
    Security update for the Linux Kernel (Live Patch 22 for SLE 15) (Important)
    2021-07-27
    oval:org.opensuse.security:def:6937
    P
    Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)
    2021-07-27
    oval:org.opensuse.security:def:7127
    P
    Security update for the Linux Kernel (Important)
    2021-07-21
    oval:org.opensuse.security:def:6924
    P
    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)
    2021-07-14
    oval:org.opensuse.security:def:6915
    P
    Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)
    2021-06-18
    oval:org.opensuse.security:def:6906
    P
    Security update for the Linux Kernel (Important)
    2021-06-09
    oval:org.opensuse.security:def:36456
    P
    libjasper-devel-1.900.1-134.17.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:48951
    P
    libvdpau1-32bit-1.1.1-6.73 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:48872
    P
    libssh4-0.6.3-11.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:70997
    P
    libnghttp2-14-1.31.1-1.15 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:48897
    P
    cyrus-sasl-digestmd5-32bit-2.1.26-8.7.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36455
    P
    libid3tag-0.15.1b-130.17 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:8775
    P
    Security update for libX11 (Important)
    2021-06-08
    oval:org.opensuse.security:def:48810
    P
    libwmf-0_2-7-0.2.8.4-242.3 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:12657
    P
    libykcs11-1-1.5.0-3.16 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:71110
    P
    tboot-20170711_1.9.6-4.18 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:48726
    P
    icu-52.1-7.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36551
    P
    qemu-0.10.1-0.5.7.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:48512
    P
    libjpeg-turbo-1.3.1-30.3 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:48968
    P
    telepathy-idle-0.2.0-1.62 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36467
    P
    libneon-devel-0.29.6-6.7.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:77953
    P
    libykcs11-1-1.5.0-3.16 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:48364
    P
    ant-1.9.4-1.6 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:48937
    P
    libosip2-3.5.0-20.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:8939
    P
    Security update for cups (Important)
    2021-04-30
    oval:org.opensuse.security:def:67757
    P
    Security update for the Linux Kernel (Live Patch 20 for SLE 15) (Important)
    2021-04-28
    oval:org.opensuse.security:def:8741
    P
    Security update for sudo (Important)
    2021-04-20
    oval:org.opensuse.security:def:6873
    P
    Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)
    2021-04-07
    oval:org.opensuse.security:def:8926
    P
    Security update for MozillaFirefox (Important)
    2021-04-01
    oval:org.opensuse.security:def:100595
    P
    (Important)
    2021-04-01
    oval:org.opensuse.security:def:69813
    P
    Security update for ldb (Important)
    2021-03-24
    oval:org.opensuse.security:def:8917
    P
    Security update for libass (Important)
    2021-03-24
    oval:org.opensuse.security:def:6467
    P
    Security update for openssl-1_0_0 (Moderate)
    2021-03-11
    oval:org.opensuse.security:def:8908
    P
    Security update for openldap2 (Important)
    2021-03-08
    oval:org.opensuse.security:def:8618
    P
    Security update for sudo (Important)
    2021-01-26
    oval:org.opensuse.security:def:8362
    P
    Security update for hawk2 (Critical)
    2021-01-22
    oval:org.opensuse.security:def:64323
    P
    Security update for perl-Convert-ASN1 (Moderate)
    2021-01-21
    oval:org.opensuse.security:def:8756
    P
    Security update for tcmu-runner (Important)
    2021-01-18
    oval:org.opensuse.security:def:6646
    P
    Security update for the Linux Kernel (Live Patch 20 for SLE 15) (Important)
    2020-12-07
    oval:org.opensuse.security:def:6848
    P
    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)
    2020-12-07
    oval:org.opensuse.security:def:62469
    P
    libsmi-devel-0.4.8-1.29 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63152
    P
    grub2-x86_64-xen-2.02-17.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:107261
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63114
    P
    kernel-azure-5.3.18-16.2 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:71656
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63286
    P
    libxmltooling-devel-1.6.4-3.3.2 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:61935
    P
    pam-1.3.0-6.16.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:49039
    P
    libuuid-devel-2.33.2-2.13 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62918
    P
    perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:93882
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:13105
    P
    libykcs11-1-1.5.0-3.16 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:61915
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63253
    P
    apache2-mod_nss-1.0.17-3.3.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:116819
    P
    libykcs11-1-1.6.2-4.30 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:52445
    P
    Security update for clamav-database (Important)
    2020-12-01
    oval:org.opensuse.security:def:53776
    P
    Security update for MozillaThunderbird (Important)
    2020-12-01
    oval:org.opensuse.security:def:37727
    P
    apache-commons-daemon on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:36845
    P
    gnome-shell on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:36880
    P
    libXi6 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:6425
    P
    libqt4-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:8513
    P
    rpcbind on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:6739
    P
    libpng12-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37242
    P
    libproxy1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:52846
    P
    Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)
    2020-12-01
    oval:org.opensuse.security:def:37348
    P
    vino on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:66562
    P
    libykcs11-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:8343
    P
    java-1_8_0-ibm on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53684
    P
    Security update for perl-DBI (Important)
    2020-12-01
    oval:org.opensuse.security:def:37683
    P
    sudo on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:36788
    P
    apache-commons-beanutils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:36869
    P
    libFLAC++6 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:6400
    P
    libmikmod3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:8504
    P
    python-imaging on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:9164
    P
    libthai-data on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37203
    P
    libhivex0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:49267
    P
    libykcs11-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:52608
    P
    Security update for java-1_8_0-ibm (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37258
    P
    libsystemd0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:66470
    P
    libidn2-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53576
    P
    Security update for java-1_8_0-openjdk (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37655
    P
    python-cupshelpers on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:36687
    P
    libpython2_7-1_0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:73135
    P
    libXrandr-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:8495
    P
    perl-XML-LibXML on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53969
    P
    gdk-pixbuf-loader-rsvg on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37994
    P
    libykcs11-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37154
    P
    kdump on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:52468
    P
    Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:37201
    P
    libgssglue1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:49213
    P
    libpcre1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:36868
    P
    krb5-appl-clients on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:8281
    P
    cracklib on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53291
    P
    Security update for shibboleth-sp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37616
    P
    logrotate on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50369
    P
    Security update for yubico-piv-tool (Low)
    2020-12-01
    oval:org.opensuse.security:def:6616
    P
    gnome-online-accounts on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:9186
    P
    libykcs11-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:8462
    P
    libvorbis-doc on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53888
    P
    Security update for LibreOffice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:6624
    P
    gstreamer on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37095
    P
    curl on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37952
    P
    libquicktime0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:52446
    P
    Security update for rubygem-actionpack-5_1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:37100
    P
    dbus-1-glib on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:6773
    P
    libvdpau1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37314
    P
    python-pyOpenSSL on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38407
    P
    libykcs11-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:8235
    P
    wget on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53125
    P
    Security update for libxml2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37567
    P
    libpcsclite1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:73253
    P
    libykcs11-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50315
    P
    Security update for python (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:8437
    P
    libpython3_4m1_0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53850
    P
    Security update for LibVNCServer (Important)
    2020-12-01
    oval:org.opensuse.security:def:36935
    P
    libpng16-16 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64410
    P
    libykcs11-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:36964
    P
    libxml2-2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:8526
    P
    Security update for xorg-x11-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:6754
    P
    libsilc-1_1-2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37270
    P
    libvorbis-doc on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:67657
    P
    libXtst-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:8213
    P
    socat on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:53019
    P
    Security update for postgresql10 and postgresql12 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:37508
    P
    libasan2-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:38365
    P
    Security update for xorg-x11-server (Important)
    2020-12-01
    oval:com.ubuntu.disco:def:2018147800000000
    V
    CVE-2018-14780 on Ubuntu 19.04 (disco) - high.
    2018-08-15
    oval:com.ubuntu.bionic:def:201814780000
    V
    CVE-2018-14780 on Ubuntu 18.04 LTS (bionic) - high.
    2018-08-15
    oval:com.ubuntu.cosmic:def:2018147800000000
    V
    CVE-2018-14780 on Ubuntu 18.10 (cosmic) - high.
    2018-08-15
    oval:com.ubuntu.cosmic:def:201814780000
    V
    CVE-2018-14780 on Ubuntu 18.10 (cosmic) - high.
    2018-08-15
    oval:com.ubuntu.bionic:def:2018147800000000
    V
    CVE-2018-14780 on Ubuntu 18.04 LTS (bionic) - high.
    2018-08-15
    oval:com.ubuntu.xenial:def:201814780000
    V
    CVE-2018-14780 on Ubuntu 16.04 LTS (xenial) - high.
    2018-08-15
    oval:com.ubuntu.xenial:def:2018147800000000
    V
    CVE-2018-14780 on Ubuntu 16.04 LTS (xenial) - high.
    2018-08-15
    BACK
    yubico piv manager *
    yubico piv manager 1.4.2b
    yubico piv manager 1.4.2c
    yubico piv manager 1.4.2d
    yubico piv manager 1.4.2e
    yubico piv manager 1.4.2f
    yubico piv manager 1.4.2g
    yubico piv tool *
    yubico smart card minidriver *