SUSE: Security Advisory (SUSE-SU-2020:3133-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:3622-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0998-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : opensc (openSUSE-2021-565)

This update for opensc fixes the following issues : - CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decodebitstring bsc1149746. - CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry bsc1149747 - CVE-2019-19479: Fixed an incorrect read...

OPENSUSE-SU-2021:0565-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decodebitstring bsc1149746. - CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry bsc1149747 - CVE-2019-19479: Fixed an incorrect read...

Security update for opensc (moderate)

openSUSE Security Update: Security update for opensc Announcement ID: openSUSE-SU-2021:0565-1 Rating: moderate References: 1149746 1149747 1158256 1158307 1170809 1177364 1177378 1177380 Cross-References: CVE-2019-15945 CVE-2019-15946 CVE-2019-19479 CVE-2019-19480 CVE-2019-20792 CVE-2020-26570...

SUSE SLED15 / SLES15 Security Update : opensc (SUSE-SU-2021:1168-1)

This update for opensc fixes the following issues : CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decodebitstring bsc1149746. CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry bsc1149747 CVE-2019-19479: Fixed an incorrect read...

SUSE-SU-2021:1168-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decodebitstring bsc1149746. - CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry bsc1149747 - CVE-2019-19479: Fixed an incorrect read...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_data

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5683811670163456 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15reader Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000006fd Cras...

SUSE SLES12 Security Update : opensc (SUSE-SU-2021:0998-1)

This update for opensc fixes the following issues : CVE-2020-26571: gemsafe GPK smart card software driver stack-based buffer overflow bsc1177380 CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string in asn1decodeentry bsc1149747 CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring ...

SUSE-SU-2021:0998-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2020-26571: gemsafe GPK smart card software driver stack-based buffer overflow bsc1177380 - CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string in asn1decodeentry bsc1149747 - CVE-2019-15945: out-of-bounds access of an ASN.1...

OpenSC 安全漏洞

OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC that allows an authenticated, local attacker to access and delete limited resources...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_pubkey

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6405808990584832 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

WS-2021-0062

Heap-buffer-overflow in scpkcs15emuoberthuraddpubkey on OpenSC. No fix version available as of version 0.21.0...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_pubkey

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6547732351287296 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

WS-2021-0080

The Oberthur smart card software driver in OpenSC before 0.22.0-rc1 has a heap-based buffer overflow in scpkcs15emuoberthuraddpubkey on pkcs15-oberthur.c...

NewStart CGSL MAIN 6.02 : opensc Multiple Vulnerabilities (NS-SA-2021-0080)

The remote NewStart CGSL host, running version MAIN 6.02, has opensc packages installed that are affected by multiple vulnerabilities: - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry in libopensc/asn1.c. CVE-2019-15946 - OpenSC before 0.20.0-rc1...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_cert

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6008101662752768 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in iasecc_process_fci

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4726860867043328 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

OESA-2021-1021 opensc security update

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the standard APIs to sma...