Opensc Project

Opensc

44 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2020-26571

  • EPSS 0.04%
  • Published 06.10.2020 02:15:13
  • Last modified 21.11.2024 05:20:06

The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init.

5.5

CVE-2020-26570

  • EPSS 0.05%
  • Published 06.10.2020 02:15:12
  • Last modified 21.11.2024 05:20:06

The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file.

6.8

CVE-2019-20792

Exploit
  • EPSS 0.17%
  • Published 29.04.2020 04:15:17
  • Last modified 21.11.2024 04:39:22

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

6.3

CVE-2013-1866

  • EPSS 0.15%
  • Published 30.01.2020 14:15:11
  • Last modified 21.11.2024 01:50:33

OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability

4.6

CVE-2019-19481

  • EPSS 0.12%
  • Published 01.12.2019 23:15:10
  • Last modified 21.11.2024 04:34:48

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates.

4.6

CVE-2019-19480

Exploit
  • EPSS 0.2%
  • Published 01.12.2019 23:15:10
  • Last modified 21.11.2024 04:34:48

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.

5.5

CVE-2019-19479

  • EPSS 0.05%
  • Published 01.12.2019 23:15:10
  • Last modified 21.11.2024 04:34:48

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute.

7.5

CVE-2019-16058

  • EPSS 0.35%
  • Published 06.09.2019 18:15:15
  • Last modified 21.11.2024 04:29:58

An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the s...

6.4

CVE-2019-15946

  • EPSS 0.05%
  • Published 05.09.2019 17:15:12
  • Last modified 21.11.2024 04:29:47

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.

6.4

CVE-2019-15945

  • EPSS 0.06%
  • Published 05.09.2019 17:15:11
  • Last modified 21.11.2024 04:29:47

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.