Yubico pam-u2f up to 1.3.0 status code

Summaryinfo

A vulnerability has been found in Yubico pam-u2f up to 1.3.0 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to status code. This vulnerability is referenced as CVE-2025-23013. The attack can only be performed from a local environment. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Yubico pam-u2f up to 1.3.0 and classified as critical. This issue affects an unknown part. The manipulation with an unknown input leads to a status code vulnerability. Using CWE to declare the problem leads to CWE-394. The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module (PAM) that can be deployed to support authentication using a YubiKey or other FIDO compliant authenticators on macOS or Linux. This software package has an issue that allows for an authentication bypass in some configurations. An attacker would require the ability to access the system as an unprivileged user. Depending on the configuration, the attacker may also need to know the user's password.

It is possible to read the advisory at yubico.com. The identification of this vulnerability is CVE-2025-23013 since 01/09/2025. The exploitation is known to be easy. Attacking locally is a requirement. The technical details are unknown and an exploit is not publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 214369 (SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pam_u2f (SUSE-SU-2025:0167-1)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.3.1 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (214369) and EUVD (EUVD-2025-3074). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Yubico

Name

• pam-u2f

Version

• 1.0
• 1.1
• 1.2
• 1.3.0

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion