Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

SUSE 15-SP3: 2021:1168-1 Moderate: Opensc Fix for Buffer Overflow Issues

suse
Calendar Grey April 13, 2021
Scroller Suse
A recent Debian patch addresses 10 vulnerabilities in opensc, bolstering both the security and reliability for Debian Linux users.
An update that fixes 8 vulnerabilities is now available

Summary

This update for opensc fixes the following issues: - CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746). - CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747) - CVE-2019-19479: Fixed an incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256) - CVE-2019-19480: Fixed an improper free operation in sc_pkcs15_decode_prkdf_entry (bsc#1158307). - CVE-2019-20792: Fixed a double free in coolkey_free_private_data (bsc#1170809). - CVE-2020-26570: Fixed a buffer overflow in sc_oberthur_read_file (bsc#1177364). - CVE-2020-26571: Fixed a stack-based buffer overflow in gemsafe GPK smart card software driver (bsc#1177380)

Topics%20covered

Topics Covered

security advisory buffer overflow moderate severity system update patch management SUSE Linux opensc

References

#1149746 #1149747 #1158256 #1158307 #1170809

#1177364 #1177378 #1177380

Cross- CVE-2019-15945 CVE-2019-15946 CVE-2019-19479

CVE-2019-19480 CVE-2019-20792 CVE-2020-26570

CVE-2020-26571 CVE-2020-26572

CVSS scores:

CVE-2019-15945 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2019-15945 (SUSE): 5.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CVE-2019-15946 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2019-15946 (SUSE): 5.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CVE-2019-19479 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2019-19479 (SUSE): 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVE-2019-19480 (NVD) : 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Announcement ID: SUSE-SU-2021:1168-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory buffer overflow moderate severity system update patch management SUSE Linux opensc

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.