CVE-2021-42782

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library...

OpenSC 资源管理错误漏洞

OpenSC is an open source smart card tool and middleware. A resource management error vulnerability exists in scpkcs15freetokeninfo prior to OpenSC version 0.22.0, which stems from a heap multiple release issue found in scpkcs15freetokeninfo...

CVE-2021-42780

A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library...

PT-2022-11684 · Opensc +1 · Opensc +1

Name of the Vulnerable Software and Affected Versions: Opensc versions prior to 0.22.0 Description: A heap double free issue was found in the sc pkcs15 free tokeninfo function. Recommendations: For versions prior to 0.22.0, update to version 0.22.0 or later to resolve the issue...

CVE-2021-42780

A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library...

CVE-2021-42781

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library...

CVE-2021-42781

Opensc is affected by CVE-2021-42781 due to heap buffer overflow in pkcs15-oberthur.c up to version 0.22.0. Exploitation could crash applications using the library. Public advisories (Debian, Gentoo, Mageia, Amazon Linux 2 ALAS) indicate the fix is in OpenSC 0.22.0 or later; upgrades to newer ope...

CVE-2021-42782: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library...

CVE-2021-42779

A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid...

CVE-2021-42779

A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid...

CVE-2021-42781

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library...

CVE-2021-42779: Use After Free

A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid...

CVE-2021-42779

OpenSC CVE-2021-42779 affects OpenSC before version 0.22.0, with a heap use-after-free vulnerability in sc_file_valid. The issue can lead to instability or crashes of applications linking to OpenSC. Public documents attribute fixes to upgrading to OpenSC 0.22.0 or newer; Debian/Red Hat/Amazon Lin...

CVE-2021-42782

OpenSC (library used for smart cards) has a CVE-2021-42782 stack/buffer overflow affecting versions before 0.22.0. The issue is among several OpenSC vulnerabilities also tracked as CVEs 2021-42779/42780/42781, with attackers potentially crashing programs via heap/stack overflows. Public notices f...

CVE-2021-42780: Unchecked Return Value

A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library...

CVE-2021-42781: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : opensc (SUSE-SU-2022:1156-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1156-1 advisory. Security issues fixed: - CVE-2021-42782: Stack buffer overflow issues in various places...

SUSE-SU-2022:1156-1 Security update for opensc

This update for opensc fixes the following issues: Security issues fixed: - CVE-2021-42782: Stack buffer overflow issues in various places bsc1191957. - CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c bsc1192000. - CVE-2021-42780: Fixed use after return in insertpin...

SUSE: Security Advisory (SUSE-SU-2022:1156-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:1041-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...