opensc security, bug fix, and enhancement update

0.19.0-3 - Make OpenSC multilib also on s390 and ppc arches 0.19.0-2 - Make OpenSC multilib again by moving the conflicting files on ix86 arch 0.19.0-1 - Rebase to new upstream release 1656791 - Add Support for HID Crescendo 144K 1612372 - Add Support for CAC Alt tokens 1645581 - Fix usage...

RHEL 7 : opensc (RHSA-2019:2154)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2154 advisory. The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic...

Out-of-bounds Reads

opensc is vulnerable to out of bounds reads while handling responses from smartcards...

Buffer Overflows

opensc has buffer overflows vulnerability. It is due to lack of proper handling of responses from CAC Cards in card-cac.c:cacgetserialnrfromCUID...

Denial Of Service (DoS)

opensc is vulnerable to denial of service DoS. The attack is possible because it cause a buffer overflow while handling responses from esteid cards in pkcs15-esteid.c:scpkcs15emuesteidinit...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from ePass 2003 Cards in card-epass2003.c:decryptresponse...

Denial Of Service (DoS)

opensc is vulnerable to denial of service DoS. It is due to double free handling responses from smartcards in libopensc/sc.c:scfilesetsecattr...

Denial Of Service (DoS)

opensc is vulnerable to denial of service DoS. The attack is possible because it does not handle infinite responses in an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c when a malicious smartcard is provided...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Cryptoflex card in readpublickey in tools/cryptoflex-tool.c...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c...

Incorrect Permission Check

opensc is vulnerable to incorrect permission check. It allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of string concatenation in utilacltostr in tools/util.c...

opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()

A buffer overflow when handling string concatenation in utilacltostr in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

opensc: Double free handling responses from smartcards in libopensc/sc.c:sc_file_set_sec_attr()

A double free when handling responses from a smartcard in scfilesetsecattr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

opensc: Infinite recusrion handling responses from IAS-ECC cards in card-iasecc.c:iasecc_select_file()

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

opensc: Buffer overflows handling responses from Muscle Cards in card-muscle.c:muscle_list_files()

Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

opensc: Buffer overflows handling responses from Gemsafe V1 Smartcards in pkcs15-gemsafeV1.c:gemsafe_get_cert_len()

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified...

opensc: Buffer overflow handling responses from esteid cards in pkcs15-esteid.c:sc_pkcs15emu_esteid_init()

A single byte buffer overflow when handling responses from an esteid Card in scpkcs15emuesteidinit in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified othe...