Red Hat Security Advisory

RHSA-2021:1600

opensc security, bug fix, and enhancement update

Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2020-16204 CVE-2020-26572 · GHSA-h2m7-5hj2-cj6c

LOW 25

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00374 Published 2020-10-06 Partial fix CWE-787

TI-2020-16203 CVE-2020-26571 · GHSA-7c8p-jqm5-mj3q

LOW 25

The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00376 Published 2020-10-06 Partial fix CWE-787

TI-2020-16202 CVE-2020-26570 · GHSA-547v-83cc-5hqg

LOW 25

The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00374 Published 2020-10-06 Partial fix CWE-787