SUSE SLES11 Security Update : opensc (SUSE-SU-2021:14835-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14835-1 advisory. - CVE-2021-42780: Fixed use after return in insertpin bsc1192005. - CVE-2021-42782: Stack buffer overflow issues in various places bsc1191957...

SUSE SLES12 Security Update : opensc (SUSE-SU-2021:3582-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3582-1 advisory. - CVE-2021-42780: Fixed use after return in insertpin bsc1192005. - CVE-2021-42779: Fixed use after free in scfilevalid bsc1191992....

SUSE-SU-2021:14835-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2021-42780: Fixed use after return in insertpin bsc1192005. - CVE-2021-42782: Stack buffer overflow issues in various places bsc1191957...

SUSE-SU-2021:3582-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2021-42780: Fixed use after return in insertpin bsc1192005. - CVE-2021-42779: Fixed use after free in scfilevalid bsc1191992. - CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c bsc1192000. - CVE-2021-42782: Stack...

OpenSC 资源管理错误漏洞

OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC, which can be exploited by an attacker to force the reuse of a freed OpenSC memory region via sc file valid to trigger a denial of service and potentially run code...

OpenSC 安全漏洞

OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC, which can be exploited by an attacker to force the reuse of a freed OpenSC memory region via insert pin to trigger a denial of service and potentially run code...

PT-2022-11685 · Opensc +2 · Opensc +2

Name of the Vulnerable Software and Affected Versions: Opensc versions prior to 0.22.0 Description: A heap use after free issue was found in the sc file valid function. This issue can potentially be exploited, but no specific details about the estimated number of affected devices or real-world...

PT-2022-11689 · Opensc +4 · Opensc +4

Name of the Vulnerable Software and Affected Versions: Opensc versions prior to 0.22.0 Description: The issue is related to stack buffer overflow problems found in various parts of the Opensc library, which could cause programs using the library to crash. Recommendations: For versions prior to...

OpenSC 缓冲区错误漏洞

OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC, which originates from a vulnerability that can be exploited by an attacker to trigger a buffer overflow in OpenSC via pkcs15- oberthurc to trigger a denial of service and possibly run code...

OpenSC 缓冲区错误漏洞

OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC, which originates from a vulnerability that can be exploited by an attacker to trigger a buffer overflow in OpenSC to trigger a denial of service and potentially run code...

PT-2022-11688 · Opensc +2 · Opensc +2

Name of the Vulnerable Software and Affected Versions: Opensc versions prior to 0.22.0 Description: Heap buffer overflow issues were found in the pkcs15-oberthur.c file that could potentially crash programs using the library. Recommendations: For versions prior to 0.22.0, update to version 0.22.0...

PT-2022-11687 · Opensc +4 · Opensc +4

Name of the Vulnerable Software and Affected Versions: Opensc versions prior to 0.22.0 Description: A use after return issue was found in the insert pin function that could potentially crash programs using the library. Recommendations: For versions prior to 0.22.0, update to version 0.22.0 or lat...

CVE-2021-42779

A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid...

CVE-2021-42781

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library...

CVE-2021-42778

A heap double free issue was found in Opensc before version 0.22.0 in scpkcs15freetokeninfo...

CVE-2021-42782

A stack buffer overflow issue was found in the OpenSC package. This flaw can potentially crash programs using the library. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

CVE-2021-42780

A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library...

PT-2023-12250 · Opensc +1 · Opensc +1

Name of the Vulnerable Software and Affected Versions: OpenSC smart card middleware versions prior to 0.23 Description: A stack overflow issue exists in the OpenSC smart card middleware due to crafted responses to APDUs, which can lead to a stack overflow. Recommendations: For versions prior to...

Advisory ROSA-SA-2021-1936

Software: opensc 0.19.0 OS: Cobalt 7.9 CVE-ID: CVE-2019-15945 CVE-Crit: MEDIUM CVE-DESC: OpenSC before 0.20.0-rc1 has out-of-bounds access to ASN.1 bit string in decodebitstring in libopensc / asn1.c. CVE-STATUS: default CVE-REV: default CVE-ID: CVE-2019-15946 CVE-Crit: MEDIUM CVE-DESC: OpenSC...

SUSE: Security Advisory (SUSE-SU-2018:3629-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...