opensc:fuzz_pkcs15_reader: Heap-double-free in sc_pkcs15_free_tokeninfo

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5137039984689152 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x602000000650 Cra...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in insert_key

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4768673595916288 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in insert_key

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5109938829131776 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in authentic_select_file

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5760835588456448 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

WS-2020-0390

OpenSC in versions 0.16.0 to 0.20.0 is vulnerable to Heap-buffer-overflow in scoberthurparsepublicinfo, related to src/libopensc/pkcs15-oberthur.c...

WS-2020-0397

openSC in versions 0.12.2-rc1 to 0.20.0 is vulnerable to Heap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

WS-2020-0380

OpenSC before 0.21.0-rc1 is vulnerable to heap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

WS-2020-0351

openSC in versions 0.12.2-rc1 to 0.20.0 is vulnerable toHeap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

PT-2020-21841

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported. The crash occurs in the sc pkcs15 free object function, which is located in the fuzz pkcs15 decode.c...

PT-2020-22493

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-double-free crash. Technical details include the crash state and the involved functions, such as sc pkcs15 free object conte...

PT-2020-22474

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Bad-free. The crash state involves the sc pkcs15 decode prkdf entry function in the fuzz pkcs15 decode.c...

CVE-2019-19480

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in scpkcs15decodeprkdfentry...

Denial Of Service (DoS)

libopenSC is susceptible to denial of service DoS attack. The vulnerability exists because libopensc/pkcs15-prkey.c freed memory incorrectly after the failure in the function scpkcs15decodeprkdfentry, leading to mishandling of the buffer limits for CAC certificates and an application crash...

Authorization

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in scpkcs15decodeprkdfentry...

CVE-2019-19480

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in scpkcs15decodeprkdfentry...

CVE-2019-19480

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in scpkcs15decodeprkdfentry...

CVE-2019-19480

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in scpkcs15decodeprkdfentry...

CVE-2019-19480

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in scpkcs15decodeprkdfentry...

PT-2019-15852

Name of the Vulnerable Software and Affected Versions OpenSC versions 0.19.0 and earlier OpenSC versions 0.20.x through 0.20.0-rc3 Description An issue was discovered in the libopensc/pkcs15-prkey.c file, where there is an incorrect free operation in the sc pkcs15 decode prkdf entry function...

CVE-2019-19480: Operation on a Resource after Expiration or Release

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in scpkcs15decodeprkdfentry...