CVE-2018-16391

Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16392

Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16393

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified...

CVE-2018-16391

Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16392

Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

OpenSC 0.18.0 Buffer Overflow / Out Of Bounds Read Vulnerability

Multiple issues have been identified in OpenSC, ranging from stack based buffer overflows to out of bounds reads and writes on the heap. They can be triggered by malicious smartcards sending malformed responses to APDU commands. Additionally to those fixes reported here, a lot of minor issues eg...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local attacker to compromise the confidentiality of protected information

The Debian GNU/Linux operating system’s opensc package contains multiple vulnerabilities that, if exploited, may lead to a breach of the confidentiality of protected information. These vulnerabilities can be exploited by local malicious individuals...

Gentoo Security Advisory GLSA 201401-18

Gentoo Linux Local Security Checks GLSA 201401-18 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

The vulnerability of the Gentoo Linux operating system allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the opensc package up to version 0.11.13-r2 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality of protected information

Multiple vulnerabilities exist in the opensc package of the Gentoo Linux operating system, up to version 0.11.8. Exploitation of these vulnerabilities may lead to violations of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Gentoo Linux operating system allows a malicious individual to compromise the integrity of protected information.

The vulnerability of the opensc package up to version 0.11.6 of the Gentoo Linux operating system can lead to the compromise of protected information. This vulnerability can be exploited locally...

OpenSC 0.11.x PKCS#11 Implementation Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33922/info OpenSC is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access to private data, which may lead to other attacks. Versions prior to OpenSC 0.11.7 are...

GLSA-201401-18 : OpenSC: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201401-18 OpenSC: Arbitrary code execution Multiple stack-based buffer overflow errors have been discovered in OpenSC. Impact : A physically proximate attacker could possibly execute arbitrary code using a specially crafted smart...

OpenSC: Arbitrary code execution

Background OpenSC is a tools and libraries for smart cards. Description Multiple stack-based buffer overflow errors have been discovered in OpenSC. Impact A physically proximate attacker could possibly execute arbitrary code using a specially crafted smart card. Workaround There is no known...

OpenSC Version Detection (Windows)

This script detects the version of OpenSC and sets the result in the KB. OpenVAS Vulnerability Test $Id: secpodopenscdetectwin.nasl 5372 2017-02-20 16:26:11Z cfi $ OpenSC Version Detection Windows Authors: Sooraj KS Copyright: Copyright c 2011 SecPod, http://www.secpod.com This program is free...

OpenSC < 0.12.0 Smart Card Serial Number Multiple Buffer Overflow Vulnerabilities - Windows

OpenSC is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenSC Detection (Windows SMB Login)

Detects the installed version of OpenSC on Windows. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : opensc (MDVSA-2011:011)

A vulnerability has been found and corrected in opensc : Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to 1 card-acos5.c, 2 card-atrust-acos.c,...

OpenSC / PCSC-Lite library buffer overflow

Buffer overflow on oversized smart card serial number...

SuSE 11.1 Security Update : opensc (SAT Patch Number 3729)

Specially crafted smart cards could cause a buffer overflow in opensc. CVE-2010-4523 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL...