CVE-2019-15945

CVE-2019-15945 affects OpenSC prior to 0.20.0-rc1, with an out-of-bounds access in libopensc/asn1.c decode_bit_string. Several advisories (Arch Linux, AlmaLinux, Debian LTS, others) map this to a vulnerability class that can enable denial of service via malformed data on a local basis. Affected p...

CVE-2019-15945

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

CVE-2019-15945

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

CVE-2019-15946: Improper Restriction of Operations within the Bounds of a Memory Buffer

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry in libopensc/asn1.c...

CVE-2019-15945: Improper Restriction of Operations within the Bounds of a Memory Buffer

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

CentOS 7 : opensc (CESA-2019:2154)

An update for opensc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Scientific Linux Security Update : opensc on SL7.x x86_64 (20190806)

The following packages have been upgraded to a later upstream version: opensc 0.19.0. Security Fixes : - opensc: Buffer overflows handling responses from Muscle Cards in card- muscle.c:musclelistfiles CVE-2018-16391 - opensc: Buffer overflows handling responses from TCOS Cards in card-...

opensc:fuzz_asn1_sig_value: Heap-buffer-overflow in asn1_decode_entry

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5746536666890240 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzasn1sigvalue Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_decode: Heap-buffer-overflow in decode_bit_string

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5150382858174464 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15decode Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_asn1_print: Heap-buffer-overflow in decode_bit_string

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5115715492773888 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzasn1print Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Global-buffer-overflow in fuzz_pkcs15_reader.c

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5648490046160896 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

opensc security, bug fix, and enhancement update

0.19.0-3 - Make OpenSC multilib also on s390 and ppc arches 0.19.0-2 - Make OpenSC multilib again by moving the conflicting files on ix86 arch 0.19.0-1 - Rebase to new upstream release 1656791 - Add Support for HID Crescendo 144K 1612372 - Add Support for CAC Alt tokens 1645581 - Fix usage...

RHEL 7 : opensc (RHSA-2019:2154)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2154 advisory. The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic...

Buffer Overflows

opensc has buffer overflows vulnerability. It is due to lack of proper handling of responses from CAC Cards in card-cac.c:cacgetserialnrfromCUID...

Out-of-bounds Reads

opensc is vulnerable to out of bounds reads while handling responses from smartcards...

Denial Of Service (DoS)

opensc is vulnerable to denial of service DoS. The attack is possible because it cause a buffer overflow while handling responses from esteid cards in pkcs15-esteid.c:scpkcs15emuesteidinit...

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from ePass 2003 Cards in card-epass2003.c:decryptresponse...

Denial Of Service (DoS)

opensc is vulnerable to denial of service DoS. It is due to double free handling responses from smartcards in libopensc/sc.c:scfilesetsecattr...

Denial Of Service (DoS)

opensc is vulnerable to denial of service DoS. The attack is possible because it does not handle infinite responses in an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c when a malicious smartcard is provided...

Incorrect Permission Check

opensc is vulnerable to incorrect permission check. It allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running...