OPENSUSE-SU-2024:13765-1 opensc-0.25.0-1.1 on GA media

These are all security issues fixed in the opensc-0.25.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12968-1 opensc-0.23.0-2.1 on GA media

These are all security issues fixed in the opensc-0.23.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13314-1 opensc-0.23.0-3.1 on GA media

These are all security issues fixed in the opensc-0.23.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11613-1 opensc-0.22.0-2.1 on GA media

These are all security issues fixed in the opensc-0.22.0-2.1 package on the GA media of openSUSE Tumbleweed...

Medium: opensc

Issue Overview: A vulnerability was found in OpenSC where PKCS1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data. CVE-2023-5992 Affected Packages: opensc Note: This advisory is applicable to Amazon Linux 2 AL2 Cor...

Amazon Linux 2 : opensc (ALAS-2024-2566)

The version of opensc installed on the remote host is prior to 0.19.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2566 advisory. A vulnerability was found in OpenSC where PKCS1 encryption padding removal is not implemented as side- channel resistant. This issu...

Medium: opensc

Issue Overview: A vulnerability was found in OpenSC where PKCS1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data. CVE-2023-5992 Affected Packages: opensc Note: This advisory is applicable to Amazon Linux 2 AL2 Cor...

RHEL 7 : opensc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - opensc: Double free in coolkeyfreeprivatedata in libopensc/card-coolkey.c CVE-2019-20792 - OpenSC before...

RHEL 8 : opensc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - opensc: Stack buffer overflow issues in various places CVE-2021-42782 - A heap double free issue was foun...

SUSE-SU-2024:1773-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2023-5992: Fixed a side-channel leaks while stripping encryption PKCS1 padding bsc1219386...

CVE-2023-4535 affecting package opensc for versions less than 0.25.1-3

CVE-2023-4535 affecting package opensc for versions less than 0.25.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2024-1454 affecting package opensc for versions less than 0.25.1-3

CVE-2024-1454 affecting package opensc for versions less than 0.25.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2023-40660 affecting package opensc for versions less than 0.25.1-3

CVE-2023-40660 affecting package opensc for versions less than 0.25.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2023-40661 affecting package opensc for versions less than 0.25.1-3

CVE-2023-40661 affecting package opensc for versions less than 0.25.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2023-5992 affecting package opensc for versions less than 0.25.1-3

CVE-2023-5992 affecting package opensc for versions less than 0.25.1-3. An upgraded version of the package is available that resolves this issue...

SUSE SLES12 Security Update : opensc (SUSE-SU-2024:1625-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1625-1 advisory. - CVE-2023-5992: Fixed a side-channel leaks while stripping encryption PKCS1 padding bsc1219386 Tenable has extracted the preceding...

SUSE: Security Advisory (SUSE-SU-2024:1625-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:1625-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2023-5992: Fixed a side-channel leaks while stripping encryption PKCS1 padding bsc1219386...

PT-2024-9391

Name of the Vulnerable Software and Affected Versions: OpenSC affected versions not specified Description: A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. This issue arises when a crafted USB device or smart card provides malicious responses to the APDUs duri...

RHEL 7 : opensc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - opensc: Double free in coolkeyfreeprivatedata in libopensc/card-coolkey.c CVE-2019-20792 - opensc: buffer...