1596 matches found
Buffer Overflows
opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Cryptoflex card in readpublickey in tools/cryptoflex-tool.c...
Buffer Overflows
opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c...
Buffer Overflows
opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c...
Buffer Overflows
opensc is vulnerable to buffer overflows. It is due to lack of proper handling of string concatenation in utilacltostr in tools/util.c...
Buffer Overflows
opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c...
opensc: Double free handling responses from smartcards in libopensc/sc.c:sc_file_set_sec_attr()
A double free when handling responses from a smartcard in scfilesetsecattr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...
opensc: Buffer overflows handling responses from Gemsafe V1 Smartcards in pkcs15-gemsafeV1.c:gemsafe_get_cert_len()
Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified...
opensc: Infinite recusrion handling responses from IAS-ECC cards in card-iasecc.c:iasecc_select_file()
Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...
opensc: Buffer overflows handling responses from Muscle Cards in card-muscle.c:muscle_list_files()
Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...
opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()
A buffer overflow when handling string concatenation in utilacltostr in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...
opensc: Buffer overflow handling responses from esteid cards in pkcs15-esteid.c:sc_pkcs15emu_esteid_init()
A single byte buffer overflow when handling responses from an esteid Card in scpkcs15emuesteidinit in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified othe...
opensc: Buffer overflow handling responses from Cryptoflex cards in cryptoflex-tool.c:read_public_key()
Several buffer overflows when handling responses from a Cryptoflex card in readpublickey in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...
opensc: Out of bounds reads handling responses from smartcards
Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs...
Moderate: Red Hat Security Advisory: opensc security, bug fix, and enhancement update
An update for opensc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
openSUSE Security Update : opensc (openSUSE-2019-904)
This update for opensc fixes the following security issues : - CVE-2018-16391: Fixed a denial of service when handling responses from a Muscle Card bsc1106998 - CVE-2018-16392: Fixed a denial of service when handling responses from a TCOS Card bsc1106999 - CVE-2018-16393: Fixed buffer overflows...
The vulnerability of the opensc authentication package for smart cards and system USB tokens in the Astra Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the opensc authentication package for smart cards and operating system USB tokens in Astra Linux is related to incorrect operation of the Rutek S drivers. Exploiting this vulnerability can allow a hacker to cause service failure...
OpenSC Multiple Out Of Bounds Write Denial of Service Vulnerabilities
Description OpenSC is prone to multiple denial-of-service vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. Versions prior to OpenSC 0.20.0-rc1 are vulnerable. Technologies Affected Opensc-Project Opensc 0.10.0 Opensc-Project Opensc 0.10.1 Opensc-Project...
OpenSC < 0.20.0 Memory Leak Vulnerability - Linux
OpenSC is prone to a memory leak vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
OpenSC < 0.20.0 Memory Leak Vulnerability - Windows
OpenSC is prone to a memory leak vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
