SUSE CVE-2019-15945

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

SUSE CVE-2019-16058

An issue was discovered in the pamp11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the signature scheme...

SUSE CVE-2019-19480

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in scpkcs15decodeprkdfentry...

SUSE CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

SUSE CVE-2019-19479

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute...

SUSE CVE-2019-20792

OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check...

SUSE CVE-2021-42779

A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid...

SUSE CVE-2021-42778

A heap double free issue was found in Opensc before version 0.22.0 in scpkcs15freetokeninfo...

SUSE CVE-2021-42781

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library...

SUSE CVE-2021-42780

A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library...

SUSE CVE-2021-42782

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library...

Ubuntu: Security Advisory (USN-5281-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : opensc (SUSE-SU-2022:4196-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4196-1 advisory. - CVE-2019-6502: Fixed memory leak in sccontextcreate in ctx.c bsc1122756. Tenable has extracted the...

SUSE-SU-2022:4196-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2019-6502: Fixed memory leak in sccontextcreate in ctx.c bsc1122756...

PT-2022-37308 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details about the crash include the function names sc pkcs15 encode df, sc pkcs15init update...

GLSA-202209-03 : OpenSC: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202209-03 OpenSC: Multiple Vulnerabilities - A heap double free issue was found in Opensc before version 0.22.0 in scpkcs15freetokeninfo. CVE-2021-42778 - A heap use after free issue was found in Opensc before version 0.22.0 in...

CVE-2021-42782 affecting package opensc for versions less than 0.22.0-1

CVE-2021-42782 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-26572 affecting package opensc for versions less than 0.22.0-1

CVE-2020-26572 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-26570 affecting package opensc for versions less than 0.22.0-1

CVE-2020-26570 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42780 affecting package opensc for versions less than 0.22.0-1

CVE-2021-42780 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...