Lucene search
Veracode Vulnerability DatabaseVERACODE:27791HistoryNov 05, 2020 - 3:10 a.m.
Out-of-bounds Access
2020-11-0503:10:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
opensc
vulnerability
out-of-bounds access
asn.1 bitstring
EPSS
0.003
Percentile
69.5%
opensc is vulnerable to out-of-bounds access. It is possible because of a flaw in ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.
References
www.openwall.com/lists/oss-security/2019/12/29/1
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/index
access.redhat.com/errata/RHSA-2020:4483
access.redhat.com/security/updates/classification/#moderate
github.com/OpenSC/OpenSC/commit/412a6142c27a5973c61ba540e33cdc22d5608e68
github.com/OpenSC/OpenSC/compare/f1691fc...12218d4
lists.debian.org/debian-lts-announce/2019/09/msg00009.html
lists.debian.org/debian-lts-announce/2021/11/msg00027.html
lists.fedoraproject.org/archives/list/[email protected]/message/NDSQLMZZYBHO5X3BK7D6E7E6NZIMZDI5/
Related
redhatcve
redhatcve
CVE-2019-15945
2019-10-24 14:50:54
debiancve
debiancve
CVE-2019-15945
2019-09-05 17:15:11
prion
prion
Design/Logic Flaw
2019-09-05 17:15:00
cvelist
cvelist
CVE-2019-15945
2019-09-05 16:07:03
cve
cve
CVE-2019-15945
2019-09-05 17:15:11
nvd
nvd
CVE-2019-15945
2019-09-05 17:15:11
osv
osv
CVE-2019-15945
2019-09-05 17:15:11
opensc vulnerabilities
2022-06-08 07:16:30
opensc - security update
2021-11-29 00:00:00
alpinelinux
alpinelinux
CVE-2019-15945
2019-09-05 17:15:11
ubuntucve
ubuntucve
CVE-2019-15945
2019-09-05 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for opensc (EulerOS-SA-2020-2066)
2020-09-29 00:00:00
Fedora: Security Advisory for opensc (FEDORA-2020-3c93790abe)
2020-01-27 00:00:00
Ubuntu: Security Advisory (USN-5281-1)
2023-01-27 00:00:00
nessus
nessus
EulerOS 2.0 SP3 : opensc (EulerOS-SA-2020-2066)
2020-09-28 00:00:00
RHEL 7 : opensc (Unpatched Vulnerability)
2024-06-03 00:00:00
CentOS 8 : opensc (CESA-2020:4483)
2021-02-01 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: opensc-0.20.0-3.fc31
2020-01-24 17:08:53
ubuntu
ubuntu
OpenSC vulnerabilities
2022-06-08 00:00:00
redhat
redhat
(RHSA-2020:4483) Moderate: opensc security, bug fix, and enhancement update
2020-11-03 12:08:55
oraclelinux
oraclelinux
opensc security, bug fix, and enhancement update
2020-11-10 00:00:00
almalinux
almalinux
Moderate: opensc security, bug fix, and enhancement update
2020-11-03 12:08:55
mageia
mageia
Updated opensc packages fix security vulnerability
2020-01-08 00:19:56
archlinux
archlinux
[ASA-202003-2] opensc: denial of service
2020-03-04 00:00:00
debian
debian
[SECURITY] [DLA 2832-1] opensc security update
2021-11-29 09:13:39
[SECURITY] [DLA 1916-1] opensc security update
2019-09-11 19:53:49
amazon
amazon
Medium: opensc
2023-09-13 23:44:00
suse
suse
Security update for opensc (moderate)
2021-04-17 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1936
2021-07-02 17:36:31