CVE-2021-34193

Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs...

Stack overflow

Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs...

CVE-2021-34193

Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs...

CVE-2021-34193

CVE-2021-34193 describes a stack overflow in the OpenSC smart card middleware (before 0.23) triggered by crafted APDU responses. Affected product: OpenSC smart card middleware (OpenSC). Impact per NVD: high, with availability impact and no confidentiality/integrity impact. Several connected advis...

CVE-2021-34193

Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs...

OpenSC 缓冲区错误漏洞

OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC smart card middleware prior to version 0.23, which originates from a stack overflow that can be caused by a crafted APDU response...

CVE-2021-34193

Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs...

Fedora: Security Advisory for opensc (FEDORA-2023-29530cc60b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: opensc-0.23.0-5.fc37

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the PKCS11 API so...

Fedora 37 : opensc (2023-2afb831742)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-2afb831742 advisory. Fix buffer overrun vulnerability 2211088, fixes CVE-2023-2977 Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 38 : opensc (2023-29530cc60b)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-29530cc60b advisory. Fix buffer overrun vulnerability 2211088, fixes CVE-2023-2977 Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora: Security Advisory for opensc (FEDORA-2023-2afb831742)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-35914 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: setcos create key, sc pkcs15init generate key, and do...

PT-2023-35905 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack buffer overflow read. Technical details include a crash state involving the sc pkcs15 get lastupdate, generate cache...

Mageia: Security Advisory (MGASA-2023-0222)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2023-0222 Updated opensc packages fix security vulnerability

Crash or info leak due to heap-based buffer out of bounds read CVE-2023-2977...

Amazon Linux 2 : opensc (ALAS-2023-2102)

The version of opensc installed on the remote host is prior to 0.19.0-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2102 advisory. A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid. CVE-2021-42779 A use after return...

CBL Mariner 2.0 Security Update: opensc (CVE-2023-2977)

The version of opensc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2977 advisory. - A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15...

CVE-2023-2977 affecting package opensc 0.22.0-1

CVE-2023-2977 affecting package opensc 0.22.0-1. A patched version of the package is available...

Medium: opensc

Issue Overview: A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid. CVE-2021-42779 A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library. CVE-2021-42780 Heap buffer overflo...