opensc Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/opensc/ Sun, 26 Feb 2023 06:47:03 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png opensc Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/opensc/ 32 32 CVE-2018-16426 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16426/ Sun, 26 Feb 2023 06:47:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16426/ Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs.

The post CVE-2018-16426 appeared first on CVE Vulnerability.

]]> Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs.

The post CVE-2018-16426 appeared first on CVE Vulnerability.

]]> CVE-2018-16425 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16425/ Sun, 26 Feb 2023 06:47:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16425/ A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

The post CVE-2018-16425 appeared first on CVE Vulnerability.

]]> A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

The post CVE-2018-16425 appeared first on CVE Vulnerability.

]]> CVE-2018-16424 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16424/ Sun, 26 Feb 2023 06:47:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16424/ A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

The post CVE-2018-16424 appeared first on CVE Vulnerability.

]]> A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

The post CVE-2018-16424 appeared first on CVE Vulnerability.

]]> CVE-2020-26572 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-26572/ Sun, 26 Feb 2023 06:40:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-26572/ The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.

The post CVE-2020-26572 appeared first on CVE Vulnerability.

]]> The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.

The post CVE-2020-26572 appeared first on CVE Vulnerability.

]]> CVE-2020-26571 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-26571/ Sun, 26 Feb 2023 06:40:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-26571/ The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init.

The post CVE-2020-26571 appeared first on CVE Vulnerability.

]]> The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init.

The post CVE-2020-26571 appeared first on CVE Vulnerability.

]]> CVE-2020-26570 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-26570/ Sun, 26 Feb 2023 06:40:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-26570/ The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file.

The post CVE-2020-26570 appeared first on CVE Vulnerability.

]]> The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file.

The post CVE-2020-26570 appeared first on CVE Vulnerability.

]]> CVE-2019-6502 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6502/ Sun, 26 Feb 2023 06:33:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6502/ sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.

The post CVE-2019-6502 appeared first on CVE Vulnerability.

]]> sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.

The post CVE-2019-6502 appeared first on CVE Vulnerability.

]]> CVE-2019-20792 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-20792/ Sun, 26 Feb 2023 06:32:35 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-20792/ OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

The post CVE-2019-20792 appeared first on CVE Vulnerability.

]]> OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

The post CVE-2019-20792 appeared first on CVE Vulnerability.

]]> CVE-2019-19480 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19480/ Sun, 26 Feb 2023 06:32:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19480/ An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.

The post CVE-2019-19480 appeared first on CVE Vulnerability.

]]> An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.

The post CVE-2019-19480 appeared first on CVE Vulnerability.

]]> CVE-2019-19481 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19481/ Sun, 26 Feb 2023 06:32:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19481/ An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates.

The post CVE-2019-19481 appeared first on CVE Vulnerability.

]]> An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates.

The post CVE-2019-19481 appeared first on CVE Vulnerability.

]]>