Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Opensc
(Opensc_project)| Repositories | https://github.com/OpenSC/OpenSC |
| #Vulnerabilities | 44 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-09-03 | CVE-2024-45617 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to unexpected work with variables that have not been initialized. | Opensc, Enterprise_linux | 3.9 | ||
| 2024-09-03 | CVE-2024-45618 | A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to unexpected work with variables that have not been initialized. | Opensc, Enterprise_linux | 3.9 | ||
| 2023-08-22 | CVE-2021-34193 | Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs. | Opensc | 7.5 | ||
| 2019-09-05 | CVE-2019-15945 | OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c. | Debian_linux, Fedora, Opensc | 6.4 | ||
| 2019-09-05 | CVE-2019-15946 | OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c. | Debian_linux, Fedora, Opensc | 6.4 | ||
| 2019-12-01 | CVE-2019-19479 | An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute. | Debian_linux, Fedora, Opensc | 5.5 | ||
| 2019-12-01 | CVE-2019-19480 | An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry. | Opensc | 4.6 | ||
| 2019-12-01 | CVE-2019-19481 | An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates. | Opensc | 4.6 | ||
| 2020-10-06 | CVE-2020-26570 | The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file. | Debian_linux, Fedora, Opensc | 5.5 | ||
| 2020-10-06 | CVE-2020-26571 | The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init. | Debian_linux, Fedora, Opensc | 5.5 |