CVE-2020-26571

OpenSC is affected: gemsafe GPK driver vulnerability CVE-2020-26571 in OpenSC before 0.21.0-rc1, caused by a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init. Several connected advisories (Arch Linux ASA-202011-27, ALAS2-2023-2262, AlmaLinux ALSA-2021:1600, Astra Linux bulletin) indica...

CVE-2020-26572

OpenSC contains a stack-based buffer overflow in the TCOS smart card driver (tcos_decipher) for versions before 0.21.0-rc1. Upgrading to OpenSC 0.21.0 or later (e.g., 0.21.0-1 or newer) is recommended as the remediation across affected distributions (AL2, Arch, Debian/LTS, etc.).

CVE-2020-26572

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcosdecipher...

CVE-2020-26572

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcosdecipher...

CVE-2020-26572

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcosdecipher...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_oberthur_parse_privateinfo

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5096082311479296 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in fuzz_reader_transmit

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5085716578828288 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Huawei EulerOS: Security Advisory for opensc (EulerOS-SA-2020-2066)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : opensc (EulerOS-SA-2020-2066)

According to the versions of the opensc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c.CVE-2019-15945 - OpenSC before...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in sc_get_response

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4847645498277888 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_oberthur_parse_publicinfo

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5146664376205312 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in hextoint

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5116660103774208 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in hextoint

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5318841276825600 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in hextoint

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5087901870981120 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in asepcos_parse_sec_attr

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5179173686214656 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_oberthur_read_file

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5088104168554496 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in asepcos_parse_sec_attr

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5734055866531840 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Stack-use-after-scope in coolkey_apdu_io

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6578720056541184 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address:...

opensc:fuzz_pkcs15_reader: Memcpy-param-overlap in authentic_set_current_files

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5161383229652992 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in asepcos_parse_sec_attr

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4787170371174400 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...