Huawei EulerOS: Security Advisory for opensc (EulerOS-SA-2021-1158)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : opensc (CESA-2020:4483)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4483 advisory. - opensc: Out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c CVE-2019-15945 - opensc: Out-of-bounds access of an ASN.1...

EulerOS 2.0 SP8 : opensc (EulerOS-SA-2021-1158)

According to the versions of the opensc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in scoberthurreadfile.CVE-2020-26570 - The...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_data

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5752721028284416 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

WS-2021-0081

The Oberthur smart card software driver in OpenSC before 0.22.0-rc1 has a heap-based buffer overflow in scpkcs15emuoberthuradddata on pkcs15-oberthur.c...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in sc_asn1_read_tag

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6308197134630912 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

MGASA-2021-0037 Updated opensc packages fix security vulnerabilities

The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in scoberthurreadfile CVE-2020-26570. The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in scpkcs15emugemsafeGPKinit CVE-2020-26571. The TCOS...

Updated opensc packages fix security vulnerabilities

The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in scoberthurreadfile CVE-2020-26570. The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in scpkcs15emugemsafeGPKinit CVE-2020-26571. The TCOS...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in sc_path_print

Detailed Report: https://oss-fuzz.com/testcase?key=5766033038245888 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f624040b380 Crash State: scpathprint scprintpath...

opensc:fuzz_pkcs15_reader: Heap-use-after-free in sc_file_valid

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5840802051915776 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

opensc:fuzz_pkcs15_reader: Negative-size-param in tcos_decipher

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6280582086656000 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

[SECURITY] Fedora 33 Update: opensc-0.21.0-1.fc33

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the PKCS11 API so...

Fedora: Security Advisory for opensc (FEDORA-2020-7c80831ffe)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES12 Security Update : opensc (SUSE-SU-2020:3133-1)

This update for opensc fixes the following issues : Security issue fixed : CVE-2019-6502: Fixed a memory leak in sccontextcreate bsc1122756. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

opensc:fuzz_pkcs15_reader: Stack-use-after-return in insert_pin

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6203718906937344 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash Address:...

WS-2020-0306

OpenSC before 0.22.0-rc1 is vulnerable to stack-use-after-return in insertpin on src/libopensc/pkcs15-tcos.c...

Denial Of Service (DoS)

opensc is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer overflow in scoberthurreadfile...

Buffer Overflow

The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in scpkcs15emugemsafeGPKinit...

Denial Of Service (DoS)

opensc is vulnerable to denial of service. A stack-based buffer overflow in tcosdecipher allows an attacker to crash the application...

opensc:fuzz_pkcs15_reader: Heap-double-free in sc_pkcs15_free_tokeninfo

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5137039984689152 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x602000000650 Cra...