Red Hat Security Advisory

RHSA-2020:4483

opensc security, bug fix, and enhancement update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2019-15012 CVE-2019-20792 · GHSA-m2w8-wqfw-qchx

LOW 31

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00657 Published 2020-04-29 Fixed CWE-415

TI-2019-11989 CVE-2019-15945 · GHSA-q94h-rrgw-hvcq

LOW 29

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.

CVSS 3.1MEDIUM 6.4 Physical No auth No interaction EPSS 0.00411 Published 2019-09-05 Partial fix CWE-119

TI-2019-11990 CVE-2019-15946 · GHSA-mqh2-9c27-h9wq

LOW 28

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.

CVSS 3.1MEDIUM 6.4 Physical No auth No interaction EPSS 0.00361 Published 2019-09-05 Partial fix CWE-119

TI-2019-14032 CVE-2019-19479 · GHSA-rmfw-qmvr-x823

LOW 25

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00398 Published 2019-12-01 Partial fix CWE-125

TI-2019-14034 CVE-2019-19481 · GHSA-99x7-636q-6hvj

LOW 21

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00246 Published 2019-12-01 Partial fix CWE-119