CVE-2015-0842
yubiserver: yubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication bypass.
CVE-2015-0842 is fixed in yubiserver on 1 platform, first by DEBIAN-CVE-2015-0842, released June 26, 2025. It is not reported as exploited. Patch Radar priority: Urgent.
Urgent
CVSS
9.8
critical
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0038
32nd percentile
yubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication bypass.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| yubiserver · Debian 12.15 (bookworm) | 0.6-1 | DEBIAN-CVE-2015-0842 | Jun 26, 2025 |
| yubiserver · Debian 13.5 (trixie) | 0.6-1 | DEBIAN-CVE-2015-0842 | Jun 26, 2025 |