CVE-2021-32489
MEDIUM
Published May 10, 20215y ago · Modified Jun 17, 20262w ago
4.4 CVSS 3.1
Published May 10, 2021 5y ago
Last Modified Jun 17, 2026 2w ago
Description
An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length field of an authenticated message received from the device because response_msg.st.len=8 can be accepted but triggers an integer overflow, which causes CRYPTO_cbc128_decrypt (in OpenSSL) to encounter an undersized buffer and experience a segmentation fault. The yubihsm-shell project is included in the YubiHSM 2 SDK product.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H Attack Vector Network
Attack Complexity High
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-190 Integer Overflow or Wraparound Numeric Error
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| yubico | yubihsm-shell | * | ≤2.0.3 |
References 1
- blog.inhq.net https://blog.inhq.net/posts/yubico-libyubihsm-vuln2/#second-attack-variant-cve-pending
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.