841 matches found
USN-5281-1: OpenSC vulnerabilities
It was discovered that some OpenSC smart card drivers mishandled memory when performing certain decoding operations. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. CVE-2019-15945,...
Malware-Infested Smart Card Reader
Brian Krebs has an interesting story of a smart ID card reader with a malware-infested Windows driver, and US government employees who inadvertently buy and use them. But by all accounts, the potential attack surface here is enormous, as many federal employees clearly will purchase these readers...
EulerOS 2.0 SP3 : opensc (EulerOS-SA-2022-1752)
According to the versions of the opensc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check...
NewStart CGSL MAIN 6.02 : opensc Multiple Vulnerabilities (NS-SA-2022-0062)
The remote NewStart CGSL host, running version MAIN 6.02, has opensc packages installed that are affected by multiple vulnerabilities: - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in scoberthurreadfile. CVE-2020-26570 - The gemsafe GPK sma...
SUSE SLES15 Security Update : opensc (SUSE-SU-2022:1041-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1041-1 advisory. Security issues fixed: - CVE-2021-42780: Fixed use after return in insertpin bsc1192005. - CVE-2021-42779: Fixed use after free in...
AlmaLinux 8 : opensc (ALSA-2021:1600)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2021:1600 advisory. - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in scoberthurreadfile. CVE-2020-26570 - The gemsafe...
Mageia: Security Advisory (MGASA-2017-0460)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the program tools and libraries used for working with OpenSC smart cards involves improper memory release before deleting the last pointer, allowing a malicious actor to cause a service failure.
The vulnerability of the programmatic tools and libraries used to work with OpenSC smart cards is related to improper memory release before deleting the last references. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file.
...
The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.
...
[SECURITY] [DLA 2832-1] opensc security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2832-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 29, 2021 https://wiki.debian.org/LTS -...
Debian DLA-2832-1 : opensc - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2832 advisory. - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c. CVE-2019-15945 - OpenSC before 0.20.0-rc1 has ...
August 10, 2021—KB5005094 (Security-only update)
None None...
August 10, 2021—KB5005099 (Monthly Rollup)
None None...
August 10, 2021—KB5005095 (Security-only update)
None None...
August 10, 2021—KB5005076 (Monthly Rollup)
None None...
August 10, 2021—KB5005106 (Security-only update)
None None...
August 10, 2021—KB5005089 (Security-only update)
None None...