Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21137
HistoryAug 08, 2019 - 12:07 a.m.

Denial Of Service (DoS)

2019-08-0800:07:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

EPSS

0.001

Percentile

45.7%

opensc is vulnerable to denial of service (DoS). The attack is possible because it does not handle infinite responses in an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c when a malicious smartcard is provided.