PT-2019-15852

Name of the Vulnerable Software and Affected Versions OpenSC versions 0.19.0 and earlier OpenSC versions 0.20.x through 0.20.0-rc3 Description An issue was discovered in the libopensc/pkcs15-prkey.c file, where there is an incorrect free operation in the sc pkcs15 decode prkdf entry function...

CVE-2019-19479: Out-of-bounds Read

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute...

CVE-2019-19480: Operation on a Resource after Expiration or Release

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in scpkcs15decodeprkdfentry...

CVE-2019-19481: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

WS-2019-0575

OpenSC in versions 0.19.0-rc1 to 0.20.0-rc3 is vulnerable to Heap-buffer-overflow in parsesecattr44, related to src/libopensc/card-setcos.c...

CVE-2019-15946

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry in libopensc/asn1.c...

OpenSC Out-of-Bounds Access Vulnerability

OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. An ASN.1 Octet string out-of-bounds access vulnerability exists in asn1decodeentry in libopensc/asn1.c in versions prior to OpenSC 0.20.0-rc1. No detailed vulnerability detail...

CVE-2019-15946

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry in libopensc/asn1.c...

Design/Logic Flaw

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

CVE-2019-15946

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry in libopensc/asn1.c...

CVE-2019-15945

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

CVE-2019-15945

CVE-2019-15945 affects OpenSC prior to 0.20.0-rc1, with an out-of-bounds access in libopensc/asn1.c decode_bit_string. Several advisories (Arch Linux, AlmaLinux, Debian LTS, others) map this to a vulnerability class that can enable denial of service via malformed data on a local basis. Affected p...

CVE-2019-15945

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

PT-2019-6153

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.20.0-rc1 Description The issue is related to an out-of-bounds access of an ASN.1 Bitstring in the decode bit string function in libopensc/asn1.c. This can allow an attacker to access confidential data, compromise its...

CVE-2019-15946: Improper Restriction of Operations within the Bounds of a Memory Buffer

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry in libopensc/asn1.c...

CVE-2019-15945: Improper Restriction of Operations within the Bounds of a Memory Buffer

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

WS-2019-0543

openSC in versions 0.12.2-rc1 to 0.19.0 is vulnerable toHeap-buffer-overflow in decodebitstring, related to src/libopensc/asn1.c...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c...

OpenSC < 0.20.0 Memory Leak Vulnerability - Linux

OpenSC is prone to a memory leak vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...