CVE-2019-19480

Опубликовано: 01 дек. 2019

Источник: nvd

CVSS3: 4.6

CVSS2: 2.1

EPSS Низкий

Описание

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.

Ссылки

http://www.openwall.com/lists/oss-security/2019/12/29/1
Mailing List
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18478
Exploit
Patch
Third Party Advisory
https://github.com/OpenSC/OpenSC/commit/6ce6152284c47ba9b1d4fe8ff9d2e6a3f5ee02c7
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDSQLMZZYBHO5X3BK7D6E7E6NZIMZDI5/
http://www.openwall.com/lists/oss-security/2019/12/29/1
Mailing List
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18478
Exploit
Patch
Third Party Advisory
https://github.com/OpenSC/OpenSC/commit/6ce6152284c47ba9b1d4fe8ff9d2e6a3f5ee02c7
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDSQLMZZYBHO5X3BK7D6E7E6NZIMZDI5/

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:opensc_project:opensc:*:*:*:*:*:*:*:*

Версия до 0.19.0 (включая)

cpe:2.3:a:opensc_project:opensc:0.20.0:rc1:*:*:*:*:*:*

cpe:2.3:a:opensc_project:opensc:0.20.0:rc2:*:*:*:*:*:*

cpe:2.3:a:opensc_project:opensc:0.20.0:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00199

Низкий

4.6 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-672

Связанные уязвимости

CVE-2019-19480

CVSS3: 4.6

ubuntu

около 6 лет назад

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.

CVE-2019-19480

CVSS3: 4.6

redhat

больше 6 лет назад

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.

CVE-2019-19480

CVSS3: 4.6

debian

около 6 лет назад

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0. ...

GHSA-x65v-c8ff-h2m3

github

больше 3 лет назад

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.

openSUSE-SU-2021:0565-1

suse-cvrf

почти 5 лет назад

Security update for opensc

EPSS

Процентиль: 42%

0.00199

Низкий

4.6 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-672