opensc:fuzz_pkcs15init: Heap-buffer-overflow in epassNUMBER_hook_path

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6472192584450048 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15init Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61500000147e Crash...

opensc:fuzz_pkcs15init: Heap-buffer-overflow in cosm_new_file

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5744597713682432 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15init Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x6150000025ff Crash...

opensc:fuzz_pkcs15init: Segv on unknown address in sc_file_clear_acl_entries

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5489372735078400 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15init Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

opensc:fuzz_pkcs15init: Stack-use-after-return in template_sanity_check

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6619327899500544 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15init Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash Address:...

opensc:fuzz_pkcs15init: Heap-buffer-overflow in process_ef

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6186314175741952 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15init Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x617000003df8 Crash...

opensc:fuzz_pkcs15init: Stack-buffer-overflow in sc_format_oid

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4901020231139328 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15init Job Type: aflasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffe52beee60 Crash...

opensc:fuzz_pkcs15init: Heap-buffer-overflow in do_fileid

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5571677042376704 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15init Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

AlmaLinux 8 : opensc (ALSA-2020:4483)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2020:4483 advisory. - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c. CVE-2019-15945 - OpenSC before...

AlmaLinux 8 : opensc (ALSA-2021:1600)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2021:1600 advisory. - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in scoberthurreadfile. CVE-2020-26570 - The gemsafe...

Mageia: Security Advisory (MGASA-2021-0512)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2020-0026)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0019)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0037)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the programmatic tools and libraries used for working with OpenSC smart cards involves operations that occur outside of the buffer in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the software tools and libraries used for working with OpenSC smart cards is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...

The vulnerability of the program tools and libraries used for working with OpenSC smart cards lies in reading data beyond the allowed buffer limits, allowing an attacker to access confidential data.

The vulnerability of the software tools and libraries used for working with OpenSC smart cards is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.

...

Debian: Security Advisory (DLA-2832-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2832-1] opensc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2832-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 29, 2021 https://wiki.debian.org/LTS -...

DLA-2832-1 opensc - security update

Bulletin has no description...

Debian DLA-2832-1 : opensc - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2832 advisory. - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c. CVE-2019-15945 - OpenSC before 0.20.0-rc1 has ...