Lucene search
+L

31 matches found

OSV
OSV
added 2023/06/15 5:8 a.m.4 views

SUSE-SU-2023:2516-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2023-2977: Fixed out of bounds read in pkcs15 cardoshaveverifyrcpackage bsc1211894...

7.1CVSS6.9AI score0.00293EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2022/04/18 5:15 p.m.36 views

CVE-2021-42779

A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid...

5.3CVSS6.7AI score0.02051EPSS
Exploits0References2
OSV
OSV
added 2022/04/12 7:55 a.m.5 views

SUSE-SU-2022:1156-1 Security update for opensc

This update for opensc fixes the following issues: Security issues fixed: - CVE-2021-42782: Stack buffer overflow issues in various places bsc1191957. - CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c bsc1192000. - CVE-2021-42780: Fixed use after return in insertpin...

5.3CVSS6AI score0.02805EPSS
Exploits0References10
OSV
OSV
added 2021/10/29 2:27 p.m.4 views

SUSE-SU-2021:14835-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2021-42780: Fixed use after return in insertpin bsc1192005. - CVE-2021-42782: Stack buffer overflow issues in various places bsc1191957...

5.3CVSS5.8AI score0.02675EPSS
Exploits0References5
OSV
OSV
added 2021/10/29 2:26 p.m.6 views

SUSE-SU-2021:3582-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2021-42780: Fixed use after return in insertpin bsc1192005. - CVE-2021-42779: Fixed use after free in scfilevalid bsc1191992. - CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c bsc1192000. - CVE-2021-42782: Stack...

5.3CVSS6AI score0.02805EPSS
Exploits0References9
OSV
OSV
added 2021/04/13 12:4 p.m.8 views

SUSE-SU-2021:1168-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decodebitstring bsc1149746. - CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry bsc1149747 - CVE-2019-19479: Fixed an incorrect read...

6.8CVSS5.9AI score0.007EPSS
Exploits2References17
Oracle linux
Oracle linux
added 2020/11/10 12:0 a.m.35 views

opensc security, bug fix, and enhancement update

0.20.0-2 - Unbreak different CardOS 5 configurations supporting raw RSA 1830856 0.20.0-1 - Rebase to current upstream release 1810660...

6.8CVSS1.9AI score0.007EPSS
Exploits1
OSV
OSV
added 2020/01/07 9:19 p.m.16 views

MGASA-2020-0026 Updated opensc packages fix security vulnerability

Updated opensc packages fix security vulnerabilities: sccontextcreate in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv CVE-2019-6502. OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

7.5CVSS6AI score0.02198EPSS
Exploits2References4
OSV
OSV
added 2019/01/08 9:50 p.m.8 views

MGASA-2019-0019 Updated opensc packages fix security vulnerabilities

Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

6.8CVSS6.4AI score0.00692EPSS
Exploits12References3
OSV
OSV
added 2018/11/05 4:57 p.m.7 views

SUSE-SU-2018:3629-1 Security update for opensc

This update for opensc fixes the following security issues: - CVE-2018-16391: Fixed a denial of service when handling responses from a Muscle Card bsc1106998 - CVE-2018-16392: Fixed a denial of service when handling responses from a TCOS Card bsc1106999 - CVE-2018-16393: Fixed buffer overflows wh...

6.8CVSS5.9AI score0.00692EPSS
Exploits12References28
Tenable Nessus
Tenable Nessus
added 2008/09/23 12:0 a.m.20 views

openSUSE 10 Security Update : libopensc2 (libopensc2-5587)

This update fixes a security issues with opensc that occured when initializing blank smart cards with Siemens CardOS M4. After the initialization anyone could set the PIN of the smart card without authorization CVE-2008-2235. NOTE: Already initialized cards are still vulnerable after this update...

4.9CVSS7.2AI score0.00393EPSS
Exploits1References2
Rows per page
Query Builder