Lucene search
+L

1464 matches found

ossfuzz
ossfuzz
added 2020/02/10 6:41 a.m.15 views

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in sc_pkcs15emu_gemsafeGPK_init

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5682366024777728 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...

6.8AI score
SaveExploits0Affected Software1
NVD
NVD
added 2020/01/30 2:15 p.m.19 views

CVE-2013-1866

OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability...

6.3CVSS6.3AI score0.00422EPSS
SaveExploits0References2
Prion
Prion
added 2020/01/30 2:15 p.m.12 views

Design/Logic Flaw

OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability...

6.3CVSS7.1AI score0.00422EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/01/30 1:7 p.m.51 views

CVE-2013-1866

CVE-2013-1866 affects OpenSC OpenSC.tokend, with an Arbitrary File Creation/Overwrite vulnerability. Descriptions in multiple sources confirm the issue but do not provide concrete exploitation details, affected versions, or specific root-cause code paths. The connected documents do not specify mi...

6.3CVSS6.3AI score0.00422EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/01/30 1:7 p.m.26 views

CVE-2013-1866

OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability...

6.3AI score0.00422EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/27 12:0 a.m.36 views

Fedora: Security Advisory for opensc (FEDORA-2020-3c93790abe)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.4CVSS6AI score0.00438EPSS
SaveExploits0References2
Fedora
Fedora
added 2020/01/24 5:8 p.m.42 views

[SECURITY] Fedora 31 Update: opensc-0.20.0-3.fc31

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the PKCS11 API so...

6.4CVSS1.6AI score0.00573EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for opensc (EulerOS-SA-2019-2293)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.3AI score0.02198EPSS
SaveExploits1References2
ossfuzz
ossfuzz
added 2020/01/17 8:37 p.m.19 views

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in fuzz_reader_connect

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5708381956603904 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2020/01/17 8:28 p.m.16 views

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_hex_dump

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5648402738315264 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2020/01/16 6:16 a.m.13 views

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in bebytes2ulong

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5725365263925248 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

6.8AI score
SaveExploits0Affected Software1
OSV
OSV
added 2020/01/07 9:19 p.m.16 views

MGASA-2020-0026 Updated opensc packages fix security vulnerability

Updated opensc packages fix security vulnerabilities: sccontextcreate in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv CVE-2019-6502. OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

7.5CVSS6AI score0.02198EPSS
SaveExploits2References4
Mageia
Mageia
added 2020/01/07 9:19 p.m.73 views

Updated opensc packages fix security vulnerability

Updated opensc packages fix security vulnerabilities: sccontextcreate in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv CVE-2019-6502. OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

7.5CVSS3.2AI score0.02198EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2019/12/31 12:0 a.m.95 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : opensc Multiple Vulnerabilities (NS-SA-2019-0249)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has opensc packages installed that are affected by multiple vulnerabilities: - Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card- muscle.c in OpenSC before 0.19.0-rc1 could...

6.8CVSS6.6AI score0.00692EPSS
SaveExploits10References12
Tenable Nessus
Tenable Nessus
added 2019/12/27 12:0 a.m.53 views

Debian DLA-2046-1 : opensc security update

An issue was discovered in libopensc/card-setcos.c in OpenSC, which has an incorrect read operation during parsing of a SETCOS file attribute. For Debian 8 'Jessie', this problem has been fixed in version 0.16.0-3+deb8u2. We recommend that you upgrade your opensc packages. NOTE: Tenable Network...

5.5CVSS6.2AI score0.00424EPSS
SaveExploits0References3
Debian
Debian
added 2019/12/26 12:53 a.m.92 views

[SECURITY] [DLA 2046-1] opensc security update

Package : opensc Version : 0.16.0-3+deb8u2 CVE ID : CVE-2019-19479 An issue was discovered in libopensc/card-setcos.c in OpenSC, which has an incorrect read operation during parsing of a SETCOS file attribute. For Debian 8 "Jessie", this problem has been fixed in version 0.16.0-3+deb8u2. We...

5.5CVSS6.6AI score0.00424EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2019/12/26 12:0 a.m.37 views

Debian: Security Advisory (DLA-2046-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.2AI score0.00424EPSS
SaveExploits0References3
OSV
OSV
added 2019/12/22 12:0 a.m.34 views

DLA-2046-1 opensc - security update

Bulletin has no description...

5.5CVSS5.9AI score0.00424EPSS
SaveExploits0
ossfuzz
ossfuzz
added 2019/12/17 8:46 p.m.17 views

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in pgp_parse_algo_attr_blob

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6329203163398144 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...

6.4AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2019/12/12 5:38 p.m.33 views

CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

4.6CVSS2.5AI score0.00246EPSS
SaveExploits0References3
Rows per page
Query Builder