Vulnerabilities > CVE-2020-13132 - Release of Invalid Pointer or Reference vulnerability in Yubico products
Attack vector
PHYSICAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. This could be used to cause a denial of service attack.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |