Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from ePass 2003 Cards in card-epass2003.c:decryptresponse...

Buffer Overflows

opensc has buffer overflows vulnerability. It is due to lack of proper handling of responses from CAC Cards in card-cac.c:cacgetserialnrfromCUID...

Denial Of Service (DoS)

opensc is vulnerable to denial of service DoS. The attack is possible because it does not handle infinite responses in an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c when a malicious smartcard is provided...

Out-of-bounds Reads

opensc is vulnerable to out of bounds reads while handling responses from smartcards...

Denial Of Service (DoS)

opensc is vulnerable to denial of service DoS. It is due to double free handling responses from smartcards in libopensc/sc.c:scfilesetsecattr...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c...

Incorrect Permission Check

opensc is vulnerable to incorrect permission check. It allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Cryptoflex card in readpublickey in tools/cryptoflex-tool.c...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of string concatenation in utilacltostr in tools/util.c...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c...

Moderate: Red Hat Security Advisory: opensc security, bug fix, and enhancement update

An update for opensc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

opensc: Buffer overflows handling responses from Muscle Cards in card-muscle.c:muscle_list_files()

Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

opensc: Buffer overflows handling responses from Gemsafe V1 Smartcards in pkcs15-gemsafeV1.c:gemsafe_get_cert_len()

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified...

opensc: Double free handling responses from smartcards in libopensc/sc.c:sc_file_set_sec_attr()

A double free when handling responses from a smartcard in scfilesetsecattr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

opensc: Out of bounds reads handling responses from smartcards

Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs...

opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()

A buffer overflow when handling string concatenation in utilacltostr in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

opensc: Buffer overflow handling responses from Cryptoflex cards in cryptoflex-tool.c:read_public_key()

Several buffer overflows when handling responses from a Cryptoflex card in readpublickey in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

opensc: Buffer overflow handling responses from esteid cards in pkcs15-esteid.c:sc_pkcs15emu_esteid_init()

A single byte buffer overflow when handling responses from an esteid Card in scpkcs15emuesteidinit in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified othe...

opensc: Infinite recusrion handling responses from IAS-ECC cards in card-iasecc.c:iasecc_select_file()

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...