Lucene search
Veracode Vulnerability DatabaseVERACODE:22097HistoryDec 04, 2019 - 8:22 a.m.
Denial Of Service (DoS)
2019-12-0408:22:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
EPSS
0.001
Percentile
40.0%
libopenSC is susceptible to denial of service (DoS) attack. The vulnerability exists because libopensc/pkcs15-prkey.c freed memory incorrectly after the failure in the function sc_pkcs15_decode_prkdf_entry, leading to mishandling of the buffer limits for CAC certificates and an application crash.
References
www.openwall.com/lists/oss-security/2019/12/29/1
bugs.chromium.org/p/oss-fuzz/issues/detail?id=18478
bugzilla.suse.com/show_bug.cgi?id=1158307
github.com/OpenSC/OpenSC/commit/6ce6152284c47ba9b1d4fe8ff9d2e6a3f5ee02c7
github.com/OpenSC/OpenSC/compare/62049ea18c622fe96bcbe3664f1b3f5f95f878cc...6ce6152284c47ba9b1d4fe8ff9d2e6a3f5ee02c7
lists.fedoraproject.org/archives/list/[email protected]/message/NDSQLMZZYBHO5X3BK7D6E7E6NZIMZDI5/
Related
alpinelinux
alpinelinux
CVE-2019-19480
2019-12-01 23:15:10
prion
prion
Authorization
2019-12-01 23:15:00
cvelist
cvelist
CVE-2019-19480
2019-12-01 22:37:18
ubuntucve
ubuntucve
CVE-2019-19480
2019-12-01 00:00:00
nvd
nvd
CVE-2019-19480
2019-12-01 23:15:10
osv
osv
CVE-2019-19480
2019-12-01 23:15:10
opensc-0.21.0-2.2 on GA media
2024-06-15 00:00:00
redhatcve
redhatcve
CVE-2019-19480
2019-12-12 17:08:39
debiancve
debiancve
CVE-2019-19480
2019-12-01 23:15:10
cve
cve
CVE-2019-19480
2019-12-01 23:15:10
openvas
openvas
OpenSC Multiple Vulnerabilities (Dec 2019) - Windows
2019-12-06 00:00:00
Fedora: Security Advisory for opensc (FEDORA-2020-3c93790abe)
2020-01-27 00:00:00
Mageia: Security Advisory (MGASA-2020-0026)
2022-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: opensc-0.20.0-3.fc31
2020-01-24 17:08:53
archlinux
archlinux
[ASA-202003-2] opensc: denial of service
2020-03-04 00:00:00
mageia
mageia
Updated opensc packages fix security vulnerability
2020-01-08 00:19:56
suse
suse
Security update for opensc (moderate)
2021-04-17 00:00:00
nessus
nessus
openSUSE Security Update : opensc (openSUSE-2021-565)
2021-04-19 00:00:00
SUSE SLED15 / SLES15 Security Update : opensc (SUSE-SU-2021:1168-1)
2021-04-14 00:00:00