41 matches found
OpenSC
OpenSC documentation Wiki is available online Please take a look at the documentation before trying to use OpenSC. Build and test status of specific cards: Cards| Status ---|--- CAC| Coolkey|...
Astra Linux – Vulnerability in opensc
OpenSC before version 0.20.0 has a double-free issue in coolkeyfreeprivatedata, because the coolkeyaddobject function in libopensc/card-coolkey.c lacks a uniqueness check...
OSV-2026-824 Stack-buffer-overflow in coolkey_rsa_op
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=517058311 Crash type: Stack-buffer-overflow READ Crash state: coolkeyrsaop coolkeycomputecrypt sccomputesignature...
PT-2026-47227
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=517058311 Crash type: Stack-buffer-overflow READ Crash state: coolkey rsa op coolkey compute crypt sc compute signature...
EUVD-2007-4113
Malware in sbrugna...
EUVD-2019-11329
Malware in sbrugna...
RHSA-2007:0631 Red Hat Security Advisory: coolkey security and bug fix update
Bulletin has no description...
OPENSUSE-SU-2024:10555-1 coolkey-1.1.0-150.1 on GA media
These are all security issues fixed in the coolkey-1.1.0-150.1 package on the GA media of openSUSE Tumbleweed...
Oracle Linux 5 : coolkey (ELSA-2007-0631)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0631 advisory. 1.1.0-5 - 1777 is not octal and does not set the correct bits should be 01777 1.1.0-4 - fix cache location to be more secure 1.1.0-3 - replace the install stuff...
SUSE CVE-2007-4129
CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory...
SUSE CVE-2019-20792
OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check...
opensc: Double free in coolkey_free_private_data in libopensc/card-coolkey.c
A use-after-free vulnerability was discovered in OpenSC while disconnecting a smart card. This flaw allows a physical attacker to exploit this vulnerability by inserting and removing a malicious smart card, handled by the coolkey driver, that could potentially execute code on the target system,...
PT-2020-22613
Name of the Vulnerable Software and Affected Versions CoolKey affected versions not specified Description The issue is related to a stack-use-after-scope READ 8 crash type. The crash state involves functions such as coolkey apdu io, coolkey rsa op, and coolkey compute crypt. Recommendations At th...
PT-2020-22275
Name of the Vulnerable Software and Affected Versions coolkey affected versions not specified Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions, including bebytes2ushort, coolkey v0 get attribute len, and coolkey v0 get attribute record...
PT-2020-22096
Name of the Vulnerable Software and Affected Versions CoolKey affected versions not specified Description The issue is related to a stack-buffer-overflow read crash. Technical details about the crash include the function names coolkey rsa op, coolkey compute crypt, and sc decipher. Recommendation...
CVE-2019-20792
A use-after-free vulnerability was discovered in OpenSC while disconnecting a smart card. This flaw allows a physical attacker to exploit this vulnerability by inserting and removing a malicious smart card, handled by the coolkey driver, that could potentially execute code on the target system,...
CVE-2019-20792
OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check...
DEBIAN-CVE-2019-20792
OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check...
