UBUNTU-CVE-2021-42781

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library...

UBUNTU-CVE-2021-42782

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library...

UBUNTU-CVE-2021-42778

A heap double free issue was found in Opensc before version 0.22.0 in scpkcs15freetokeninfo...

CVE-2021-42778

OpenSC has a heap double free vulnerability CVE-2021-42778 in sc_pkcs15_free_tokeninfo, affecting pre-0.22.0 releases. Debian/Red Hat advisories indicate fixes by upgrading to newer OpenSC versions (e.g., Debian 11: 0.21.0-1+deb11u1). Impact notes in linked advisories mention potential crashes (a...

CVE-2021-42778

A heap double free issue was found in Opensc before version 0.22.0 in scpkcs15freetokeninfo...

CVE-2021-42778

A heap double free issue was found in Opensc before version 0.22.0 in scpkcs15freetokeninfo...

CVE-2021-42781

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library...

CVE-2021-42779

A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid...

OpenSC 资源管理错误漏洞

OpenSC is an open source smart card tool and middleware. A resource management error vulnerability exists in scpkcs15freetokeninfo prior to OpenSC version 0.22.0, which stems from a heap multiple release issue found in scpkcs15freetokeninfo...

CVE-2021-42779

OpenSC CVE-2021-42779 affects OpenSC before version 0.22.0, with a heap use-after-free vulnerability in sc_file_valid. The issue can lead to instability or crashes of applications linking to OpenSC. Public documents attribute fixes to upgrading to OpenSC 0.22.0 or newer; Debian/Red Hat/Amazon Lin...

CVE-2021-42782

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library...

CVE-2021-42780

CVE-2021-42780 affects OpenSC before version 0.22.0. Description and multiple security bulletins across Debian, Mageia, Gentoo, and Amazon indicate a use-after-return issue in insert_pin() that could crash programs using the library. Public advisories consistently recommend upgrading to OpenSC 0....

CVE-2021-42782

OpenSC (library used for smart cards) has a CVE-2021-42782 stack/buffer overflow affecting versions before 0.22.0. The issue is among several OpenSC vulnerabilities also tracked as CVEs 2021-42779/42780/42781, with attackers potentially crashing programs via heap/stack overflows. Public notices f...

PT-2022-11684 · Opensc +1 · Opensc +1

Name of the Vulnerable Software and Affected Versions: Opensc versions prior to 0.22.0 Description: A heap double free issue was found in the sc pkcs15 free tokeninfo function. Recommendations: For versions prior to 0.22.0, update to version 0.22.0 or later to resolve the issue...

CVE-2021-42780

A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library...

CVE-2021-42781

Opensc is affected by CVE-2021-42781 due to heap buffer overflow in pkcs15-oberthur.c up to version 0.22.0. Exploitation could crash applications using the library. Public advisories (Debian, Gentoo, Mageia, Amazon Linux 2 ALAS) indicate the fix is in OpenSC 0.22.0 or later; upgrades to newer ope...

CVE-2021-42779

A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid...

CVE-2021-42780

A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library...

CVE-2021-42781

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library...

CVE-2021-42782

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library...