WS-2020-0390

OpenSC in versions 0.16.0 to 0.20.0 is vulnerable to Heap-buffer-overflow in scoberthurparsepublicinfo, related to src/libopensc/pkcs15-oberthur.c...

WS-2020-0397

openSC in versions 0.12.2-rc1 to 0.20.0 is vulnerable to Heap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

WS-2020-0380

OpenSC before 0.21.0-rc1 is vulnerable to heap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

WS-2020-0351

openSC in versions 0.12.2-rc1 to 0.20.0 is vulnerable toHeap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

CVE-2019-20792

OpenSC = 0.20.0 (or apply vendor-specific patches as listed in advisories). If exploiting details are not provided in the documents, no exploitation specifics are described here.

CVE-2019-20792

OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check...

PT-2020-10765

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.20.0 Description The issue is related to a double free in coolkey free private data due to coolkey add object lacking a uniqueness check in libopensc/card-coolkey.c. Recommendations For versions prior to 0.20.0, upda...

Debian DLA-2046-1 : opensc security update

An issue was discovered in libopensc/card-setcos.c in OpenSC, which has an incorrect read operation during parsing of a SETCOS file attribute. For Debian 8 'Jessie', this problem has been fixed in version 0.16.0-3+deb8u2. We recommend that you upgrade your opensc packages. NOTE: Tenable Network...

Debian: Security Advisory (DLA-2046-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

libopenSC is susceptible to denial of service DoS attack. The vulnerability exists because libopensc/pkcs15-prkey.c freed memory incorrectly after the failure in the function scpkcs15decodeprkdfentry, leading to mishandling of the buffer limits for CAC certificates and an application crash...

Denial Of Service (DoS)

libopenSC is vulnerable to denial of service DoS. The vulnerability exists as libopensc/card-cac1.c does not properly handle the buffer limits for CAC certificates, causing an application crash...

CVE-2019-19479

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute...

CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

CVE-2019-19479

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute...

CVE-2019-19479

OpenSC has a historical vulnerability CVE-2019-19479: an incorrect read operation in libopensc/card-setcos.c during parsing of a SETCOS file attribute. This issue affects OpenSC up to 0.20.x (0.20.0-rc3) and was acknowledged across multiple advisories (including Debian LTS and AlmaLinux) with fix...

CVE-2019-19479

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute...

CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

CVE-2019-19480

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in scpkcs15decodeprkdfentry...

PT-2019-15853

Name of the Vulnerable Software and Affected Versions OpenSC versions 0.19.0 and earlier OpenSC versions 0.20.x through 0.20.0-rc3 Description An issue was discovered in the handling of buffer limits for CAC certificates in libopensc/card-cac1.c. Recommendations For OpenSC versions 0.19.0 and...

PT-2019-6155

Name of the Vulnerable Software and Affected Versions OpenSC versions 0.19.0 and 0.20.x through 0.20.0-rc3 Description The issue is related to an out-of-bounds read operation in the OpenSC library, specifically in the libopensc/card-setcos.c file during the parsing of a SETCOS file attribute. Thi...