https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T20:32:45.305726+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02527 bdu:2019-02527 2026-10-10T20:32:45.452546+00:00 bdu:2019-02527 https://cve.radiocsirt.org/vuln/cnvd-2020-52898 cnvd-2020-52898 2026-10-10T20:32:45.452586+00:00 cnvd-2020-52898 https://cve.radiocsirt.org/vuln/euvd-2026-54880 EUVD-2026-54880 2026-10-10T20:32:45.452601+00:00 EUVD-2026-54880 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12210 fkie_cve-2019-12210 2026-10-10T20:32:45.452613+00:00

In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed when a new process is spawned. This leads to the file descriptor being inherited into the child process; the child process can then read from and write to it. This can leak sensitive information and also, if written to, be used to fill the disk or plant misinformation.

 https://cve.radiocsirt.org/vuln/ghsa-pxf2-5pmm-5r8f GHSA-pxf2-5pmm-5r8f 2026-10-10T20:32:45.452642+00:00

In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed when a new process is spawned. This leads to the file descriptor being inherited into the child process; the child process can then read from and write to it. This can leak sensitive information and also, if written to, be used to fill the disk or plant misinformation.

 https://cve.radiocsirt.org/vuln/gsd-2019-12210 gsd-2019-12210 2026-10-10T20:32:45.452658+00:00 gsd-2019-12210 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1708-1 openSUSE-SU-2019:1708-1 — Security update for libu2f-host, pam_u2f 2026-10-10T20:32:45.452669+00:00

Security update for libu2f-host, pam_u2f

 https://cve.radiocsirt.org/vuln/suse-su-2019:1749-1 SUSE-SU-2019:1749-1 — Security update for libu2f-host 2026-10-10T20:32:45.452687+00:00

Security update for libu2f-host

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12210 Withdrawn: UBUNTU-CVE-2019-12210 2026-10-10T20:32:45.452702+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: pam-u2f, Ubuntu:Pro:18.04:LTS: pam-u2f

In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed when a new process is spawned. This leads to the file descriptor being inherited into the child process; the child process can then read from and write to it. This can leak sensitive information and also, if written to, be used to fill the disk or plant misinformation.