Opensc: multiple memory issues with pkcs15-init (enrollment tool)

...

Opensc: memory use after free in authentic driver when updating token info

...

Opensc: potential pin bypass when card tracks its own login state

...

PT-2024-9401

Name of the Vulnerable Software and Affected Versions OpenSC affected versions not specified OpenSC tools affected versions not specified PKCS11 module affected versions not specified minidriver affected versions not specified CTK affected versions not specified Description An issue exists...

OPENSUSE-SU-2024:11643-1 opensc-0.22.0-3.1 on GA media

These are all security issues fixed in the opensc-0.22.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11123-1 opensc-0.21.0-2.2 on GA media

These are all security issues fixed in the opensc-0.21.0-2.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11613-1 opensc-0.22.0-2.1 on GA media

These are all security issues fixed in the opensc-0.22.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13765-1 opensc-0.25.0-1.1 on GA media

These are all security issues fixed in the opensc-0.25.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13314-1 opensc-0.23.0-3.1 on GA media

These are all security issues fixed in the opensc-0.23.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12968-1 opensc-0.23.0-2.1 on GA media

These are all security issues fixed in the opensc-0.23.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13733-1 opensc-0.24.0-2.1 on GA media

These are all security issues fixed in the opensc-0.24.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10269-1 opensc-0.16.0-2.1 on GA media

These are all security issues fixed in the opensc-0.16.0-2.1 package on the GA media of openSUSE Tumbleweed...

Amazon Linux 2 : opensc (ALAS-2024-2566)

The version of opensc installed on the remote host is prior to 0.19.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2566 advisory. A vulnerability was found in OpenSC where PKCS1 encryption padding removal is not implemented as side- channel resistant. This issu...

Medium: opensc

Issue Overview: A vulnerability was found in OpenSC where PKCS1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data. CVE-2023-5992 Affected Packages: opensc Note: This advisory is applicable to Amazon Linux 2 AL2 Cor...

Medium: opensc

Issue Overview: A vulnerability was found in OpenSC where PKCS1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data. CVE-2023-5992 Affected Packages: opensc Note: This advisory is applicable to Amazon Linux 2 AL2 Cor...

RHEL 8 : opensc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - opensc: Stack buffer overflow issues in various places CVE-2021-42782 - A heap double free issue was foun...

RHEL 7 : opensc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - opensc: Double free in coolkeyfreeprivatedata in libopensc/card-coolkey.c CVE-2019-20792 - OpenSC before...

SUSE-SU-2024:1773-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2023-5992: Fixed a side-channel leaks while stripping encryption PKCS1 padding bsc1219386...

CVE-2023-5992 affecting package opensc for versions less than 0.25.1-3

CVE-2023-5992 affecting package opensc for versions less than 0.25.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2023-4535 affecting package opensc for versions less than 0.25.1-3

CVE-2023-4535 affecting package opensc for versions less than 0.25.1-3. An upgraded version of the package is available that resolves this issue...