CVE-2019-9578

Name of the Vulnerable Software and Affected Versions Yubico libu2f-host versions prior to 1.1.8

Description The issue is caused by a buffer overflow in the devs.c file of the Yubico libu2f-host library, which can lead to a denial of service due to incorrect parsing of the response to the init command. This can potentially allow a remote attacker to exploit the vulnerability.

Recommendations For versions prior to 1.1.8, update to version 1.1.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the devs.c file or the init command to minimize the risk of exploitation.