OpenSC CVE-2019-6502 Memory Leak Denial of Service Vulnerability

2019-01-2000:00:00

Symantec Security Response

www.symantec.com

EPSS

0.003

Percentile

68.7%

JSON

Description

OpenSC is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. OpenSC version 0.19.0 is vulnerable; other versions may also be affected.

Technologies Affected

Opensc-Project Opensc 0.19.0

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Given the nature of this issue, restrict access to trusted individuals only.

Updates are available. Please see the references or vendor advisory for more information.