An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in
    libopensc/asn1.c. (CVE-2019-15946)

  - sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from
    eidenv. (CVE-2019-6502)

  - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in
    libopensc/asn1.c. (CVE-2019-15945)

  - An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c
    has an incorrect read operation during parsing of a SETCOS file attribute. (CVE-2019-19479)

This update for opensc fixes the following issues :

&#9; - CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746).

  - CVE-2019-15946: Fixed an out-of-bounds access of an     ASN.1 Octet string in asn1_decode_entry (bsc#1149747)

  - CVE-2019-19479: Fixed an incorrect read operation during     parsing of a SETCOS file attribute (bsc#1158256)

  - CVE-2019-19480: Fixed an improper free operation in     sc_pkcs15_decode_prkdf_entry (bsc#1158307).

  - CVE-2019-20792: Fixed a double free in     coolkey_free_private_data (bsc#1170809). 

  - CVE-2020-26570: Fixed a buffer overflow in     sc_oberthur_read_file (bsc#1177364).

  - CVE-2020-26571: Fixed a stack-based buffer overflow in     gemsafe GPK smart card software driver (bsc#1177380)

  - CVE-2020-26572: Fixed a stack-based buffer overflow in     tcos_decipher (bsc#1177378).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for opensc fixes the following issues :

CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746).

CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747)

CVE-2019-19479: Fixed an incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256)

CVE-2019-19480: Fixed an improper free operation in sc_pkcs15_decode_prkdf_entry (bsc#1158307).

CVE-2019-20792: Fixed a double free in coolkey_free_private_data (bsc#1170809).

CVE-2020-26570: Fixed a buffer overflow in sc_oberthur_read_file (bsc#1177364).

CVE-2020-26571: Fixed a stack-based buffer overflow in gemsafe GPK smart card software driver (bsc#1177380)

CVE-2020-26572: Fixed a stack-based buffer overflow in tcos_decipher (bsc#1177378).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
406029	Alpine: multiple opensc packages: security update to 0.20.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
406029	Alpine: multiple opensc packages: security update to 0.20.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
400447	Alpine: multiple opensc packages: security update to 0.19.0-r3 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
400447	Alpine: multiple opensc packages: security update to 0.19.0-r3 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
148763	openSUSE Security Update : opensc (openSUSE-2021-565)	Nessus	SuSE Local Security Checks	medium
148502	SUSE SLED15 / SLES15 Security Update : opensc (SUSE-SU-2021:1168-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2019-19480

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium