CVE-2015-0843
yubiserver: yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf.
CVE-2015-0843 is fixed in yubiserver on 1 platform, first by DEBIAN-CVE-2015-0843, released June 26, 2025. It is not reported as exploited. Patch Radar priority: Urgent.
Urgent
CVSS
9.8
critical
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0045
38th percentile
yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| yubiserver · Debian 12.15 (bookworm) | 0.6-1 | DEBIAN-CVE-2015-0843 | Jun 26, 2025 |
| yubiserver · Debian 13.5 (trixie) | 0.6-1 | DEBIAN-CVE-2015-0843 | Jun 26, 2025 |