CVE catalog

CVE-2018-14780

yubico-piv-tool: CVE-2018-14780

[CVE catalog]

Severity
Low · CVSS 2.2CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.45% · Oct 25, 2026

An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `_ykpiv_fetch_object()`: {% highlight c %} if(sw == SW_SUCCESS) { size_t outlen; int offs = _ykpiv_get_length(data + 1, &outlen); if(offs == 0) { return YKPIV_SIZE_ERROR; } memmove(data, data + 1 + offs, outlen); *len = outlen; return YKPIV_OK; } else { return YKPIV_GENERIC_ERROR; } {% endhighlight %} -- in the end, a `memmove()` occurs with a length retrieved from APDU data. This length is not checked for whether it is outside of the APDU data retrieved. Therefore the `memmove()` could copy bytes behind the allocated data buffer into this buffer.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianyubico-piv-toolsid2.7.3-2fixed
Debianyubico-piv-toolforky2.7.3-2fixed
Debianyubico-piv-tooltrixie2.7.1-1fixed
Debianyubico-piv-toolbookworm2.2.0-1.1fixed
Ubuntuyubico-piv-toolpro1.0.1-1vulnerable
Ubuntuyubico-piv-toolpro1.0.3-1vulnerable
Ubuntuyubico-piv-toolpro1.0.3-1ubuntu0.1~esm1fixed
Ubuntuyubico-piv-tool18.041.4.2-2vulnerable
Ubuntuyubico-piv-tool18.041.4.2-2ubuntu0.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianyubico-piv-toolsourcesid1.6.1-1lowNot reported[906128]
Debianyubico-piv-toolsourceforky1.6.1-1lowNot reported[906128]
Debianyubico-piv-toolsourcetrixie1.6.1-1lowNot reported[906128]
Debianyubico-piv-toolsourcebookworm1.6.1-1lowNot reported[906128]
Ubuntuyubico-piv-tooldebpro1.0.3-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2018-14780Not reported
Ubuntuyubico-piv-tooldeb18.041.4.2-2ubuntu0.1Not reportedUBUNTU-CVE-2018-14780Not reported

[Debian bug #906128]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libykpiv2]Fixed

    Source package: [yubico-piv-tool]

    Details (2)

    • 2.2.0-1.1 · amd64 · bookworm

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · bookworm; dsa · yubico-piv-tool · debian · 12

    • 2.2.0-1.1 · arm64 · bookworm

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · bookworm; dsa · yubico-piv-tool · debian · 12

  • [libykpiv-dev]Fixed

    Source package: [yubico-piv-tool]

    Details (2)

    • 2.2.0-1.1 · amd64 · bookworm

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · bookworm; dsa · yubico-piv-tool · debian · 12

    • 2.2.0-1.1 · arm64 · bookworm

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · bookworm; dsa · yubico-piv-tool · debian · 12

  • [ykcs11]Fixed

    Source package: [yubico-piv-tool]

    Details (2)

    • 2.2.0-1.1 · amd64 · bookworm

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · bookworm; dsa · yubico-piv-tool · debian · 12

    • 2.2.0-1.1 · arm64 · bookworm

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · bookworm; dsa · yubico-piv-tool · debian · 12

  • [yubico-piv-tool]Fixed
    Details (2)

    • 2.2.0-1.1 · amd64 · bookworm

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · bookworm; dsa · yubico-piv-tool · debian · 12

    • 2.2.0-1.1 · arm64 · bookworm

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · bookworm; dsa · yubico-piv-tool · debian · 12

[Debian 13 (Trixie)]

  • [libykpiv2]Fixed

    Source package: [yubico-piv-tool]

    Details (2)

    • 2.7.1-1 · amd64 · trixie

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · 13

    • 2.7.1-1 · arm64 · trixie

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · 13

  • [libykpiv-dev]Fixed

    Source package: [yubico-piv-tool]

    Details (2)

    • 2.7.1-1 · amd64 · trixie

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · 13

    • 2.7.1-1 · arm64 · trixie

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · 13

  • [ykcs11]Fixed

    Source package: [yubico-piv-tool]

    Details (2)

    • 2.7.1-1 · amd64 · trixie

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · 13

    • 2.7.1-1 · arm64 · trixie

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · 13

  • [yubico-piv-tool]Fixed
    Details (2)

    • 2.7.1-1 · amd64 · trixie

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · 13

    • 2.7.1-1 · arm64 · trixie

      Fixed · Fixed: 1.6.1-1

      dsa · yubico-piv-tool · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]