1464 matches found
[ASA-202011-27] opensc: arbitrary code execution
Arch Linux Security Advisory ASA-202011-27 ========================================== Severity: Medium Date : 2020-11-26 CVE-ID : CVE-2020-26570 CVE-2020-26571 CVE-2020-26572 Package : opensc Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1298 Summary ======...
Oracle Linux 8 : opensc (ELSA-2020-4483)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4483 advisory. 0.20.0-2 - Unbreak different CardOS 5 configurations supporting raw RSA 1830856 0.20.0-1 - Rebase to current upstream release 1810660 Tenable has...
opensc security, bug fix, and enhancement update
0.20.0-2 - Unbreak different CardOS 5 configurations supporting raw RSA 1830856 0.20.0-1 - Rebase to current upstream release 1810660...
Double Free
opensc is vulnerable to double free. The vulnerability exists due to lack of uniqueness check in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c...
Out-of-bounds Read
opensc is vulnerable to out-of-bounds reads. Incorrect read in libopensc/card-setcos.c during parsing of a SETCOS file attribute...
Out-of-bounds Access
opensc is vulnerable to out-of-bounds access. It is possible because of a flaw in ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...
opensc: Out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c
OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...
opensc: Double free in coolkey_free_private_data in libopensc/card-coolkey.c
A use-after-free vulnerability was discovered in OpenSC while disconnecting a smart card. This flaw allows a physical attacker to exploit this vulnerability by inserting and removing a malicious smart card, handled by the coolkey driver, that could potentially execute code on the target system,...
opensc: Improper handling of buffer limits for CAC certificates
An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...
opensc: Incorrect read operation during parsing of a SETCOS file attribute
An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute...
Moderate: Red Hat Security Advisory: opensc security, bug fix, and enhancement update
An update for opensc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
RHEL 8 : opensc (RHSA-2020:4483)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4483 advisory. The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic...
Moderate: opensc security, bug fix, and enhancement update
The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures. The following packages have been upgraded to a later upstream...
SUSE-SU-2020:3133-1 Security update for opensc
This update for opensc fixes the following issues: Security issue fixed: - CVE-2019-6502: Fixed a memory leak in sccontextcreate bsc1122756...
CVE-2020-26572
The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcosdecipher. Mitigation This flaw can be mitigated in cases where you can use opensc without the TCOS driver enabled. In such cases, the vulnerable driver can be disabled by specifying them in...
CVE-2020-26571
The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in scpkcs15emugemsafeGPKinit. Mitigation This flaw can be mitigated in cases where you can use opensc without the gemsafeGPK driver enabled. In such cases, the vulnerable driver can be disable...
CVE-2020-26570
The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in scoberthurreadfile. Mitigation This flaw can be mitigated in cases where you can use opensc without the Oberthur driver enabled. In such cases, the vulnerable driver can be disabled by specifyi...
CVE-2020-26572
The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcosdecipher...
