CVE-2018-16392

Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

OpenSC 0.18.0 Buffer Overflow / Out Of Bounds Read Vulnerability

Multiple issues have been identified in OpenSC, ranging from stack based buffer overflows to out of bounds reads and writes on the heap. They can be triggered by malicious smartcards sending malformed responses to APDU commands. Additionally to those fixes reported here, a lot of minor issues eg...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local attacker to compromise the confidentiality of protected information

The Debian GNU/Linux operating system’s opensc package contains multiple vulnerabilities that, if exploited, may lead to a breach of the confidentiality of protected information. These vulnerabilities can be exploited by local malicious individuals...

Gentoo Security Advisory GLSA 201401-18

Gentoo Linux Local Security Checks GLSA 201401-18 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

The vulnerability of the Gentoo Linux operating system allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the opensc package up to version 0.11.13-r2 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

The vulnerability of the Gentoo Linux operating system allows a malicious individual to compromise the integrity of protected information.

The vulnerability of the opensc package up to version 0.11.6 of the Gentoo Linux operating system can lead to the compromise of protected information. This vulnerability can be exploited locally...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality of protected information

Multiple vulnerabilities exist in the opensc package of the Gentoo Linux operating system, up to version 0.11.8. Exploitation of these vulnerabilities may lead to violations of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

OpenSC 0.11.x PKCS#11 Implementation Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33922/info OpenSC is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access to private data, which may lead to other attacks. Versions prior to OpenSC 0.11.7 are...

GLSA-201401-18 : OpenSC: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201401-18 OpenSC: Arbitrary code execution Multiple stack-based buffer overflow errors have been discovered in OpenSC. Impact : A physically proximate attacker could possibly execute arbitrary code using a specially crafted smart...

OpenSC: Arbitrary code execution

Background OpenSC is a tools and libraries for smart cards. Description Multiple stack-based buffer overflow errors have been discovered in OpenSC. Impact A physically proximate attacker could possibly execute arbitrary code using a specially crafted smart card. Workaround There is no known...

OpenSC Version Detection (Windows)

This script detects the version of OpenSC and sets the result in the KB. OpenVAS Vulnerability Test $Id: secpodopenscdetectwin.nasl 5372 2017-02-20 16:26:11Z cfi $ OpenSC Version Detection Windows Authors: Sooraj KS Copyright: Copyright c 2011 SecPod, http://www.secpod.com This program is free...

OpenSC < 0.12.0 Smart Card Serial Number Multiple Buffer Overflow Vulnerabilities - Windows

OpenSC is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenSC Detection (Windows SMB Login)

Detects the installed version of OpenSC on Windows. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : opensc (MDVSA-2011:011)

A vulnerability has been found and corrected in opensc : Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to 1 card-acos5.c, 2 card-atrust-acos.c,...

OpenSC / PCSC-Lite library buffer overflow

Buffer overflow on oversized smart card serial number...

SuSE 11.1 Security Update : opensc (SAT Patch Number 3729)

Specially crafted smart cards could cause a buffer overflow in opensc. CVE-2010-4523 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL...

Mandriva Update for opensc MDVSA-2011:011 (opensc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[ MDVSA-2011:011 ] opensc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:011 http://www.mandriva.com/security/ Package : opensc Date : January 15, 2011 Affected: 2009.0, 2010.0, 2010.1, Corporate 4.0 Problem Description: A vulnerability has been found and corrected in opensc:...

Fedora Update for opensc FEDORA-2010-19193

Check for the Version of opensc OpenVAS Vulnerability Test Fedora Update for opensc FEDORA-2010-19193 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for opensc FEDORA-2010-19192

Check for the Version of opensc OpenVAS Vulnerability Test Fedora Update for opensc FEDORA-2010-19192 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...