Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

opensc project opensc vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-5992
A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.
Opensc Project OpenscRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
NA
CVE-2023-4535
An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an malicious user to have physical access to the computer and a specially crafted USB device or smart card. This flaw all...
Opensc Project Opensc 0.23.0Redhat Enterprise Linux 9.0Fedoraproject Fedora 38Fedoraproject Fedora 39
NA
CVE-2023-40660
A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logo...
Opensc Project OpenscRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
NA
CVE-2023-40661
Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and ...
Opensc Project OpenscRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
NA
CVE-2021-34193
Stack overflow vulnerability in OpenSC smart card middleware prior to 0.23 via crafted responses to APDUs.
Opensc Project Opensc
NA
CVE-2023-2977
A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags...
Opensc Project Opensc 0.23.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
5
CVSSv2
CVE-2021-42778
A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.
Opensc Project OpenscFedoraproject Fedora 33Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0
5
CVSSv2
CVE-2021-42779
A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.
Opensc Project OpenscFedoraproject Fedora 33Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0
5
CVSSv2
CVE-2021-42782
Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library.
Opensc Project OpenscFedoraproject Fedora 33
5
CVSSv2
CVE-2021-42780
A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library.
Opensc Project OpenscFedoraproject Fedora 33Redhat Enterprise Linux 7.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook