PT-2022-37308 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details about the crash include the function names sc pkcs15 encode df, sc pkcs15init update...

GLSA-202209-03 : OpenSC: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202209-03 OpenSC: Multiple Vulnerabilities - A heap double free issue was found in Opensc before version 0.22.0 in scpkcs15freetokeninfo. CVE-2021-42778 - A heap use after free issue was found in Opensc before version 0.22.0 in...

CVE-2020-26572 affecting package opensc for versions less than 0.22.0-1

CVE-2020-26572 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-26570 affecting package opensc for versions less than 0.22.0-1

CVE-2020-26570 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42782 affecting package opensc for versions less than 0.22.0-1

CVE-2021-42782 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42781 affecting package opensc for versions less than 0.22.0-1

CVE-2021-42781 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42780 affecting package opensc for versions less than 0.22.0-1

CVE-2021-42780 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42779 affecting package opensc for versions less than 0.22.0-1

CVE-2021-42779 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42778 affecting package opensc for versions less than 0.22.0-1

CVE-2021-42778 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-26571 affecting package opensc for versions less than 0.22.0-1

CVE-2020-26571 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...

USN-5281-1: OpenSC vulnerabilities

It was discovered that some OpenSC smart card drivers mishandled memory when performing certain decoding operations. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. CVE-2019-15945,...

USN-5281-1 opensc vulnerabilities

It was discovered that some OpenSC smart card drivers mishandled memory when performing certain decoding operations. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. CVE-2019-15945,...

EulerOS 2.0 SP3 : opensc (EulerOS-SA-2022-1752)

According to the versions of the opensc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check...

Huawei EulerOS: Security Advisory for opensc (EulerOS-SA-2022-1752)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

new packages: opensc

An update is available for opensc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

NewStart CGSL MAIN 6.02 : opensc Multiple Vulnerabilities (NS-SA-2022-0062)

The remote NewStart CGSL host, running version MAIN 6.02, has opensc packages installed that are affected by multiple vulnerabilities: - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in scoberthurreadfile. CVE-2020-26570 - The gemsafe GPK sma...

A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library.

...

A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.

...

A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.

...

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.

...