CVE-2019-20792

Опубликовано: 29 апр. 2020

Источник: nvd

CVSS3: 6.8

CVSS2: 4.6

EPSS Низкий

Описание

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

Ссылки

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19208
Exploit
Third Party Advisory
https://github.com/OpenSC/OpenSC/commit/c246f6f69a749d4f68626b40795a4f69168008f4
Patch
Third Party Advisory
https://github.com/OpenSC/OpenSC/compare/0.19.0...0.20.0
Release Notes
Third Party Advisory
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19208
Exploit
Third Party Advisory
https://github.com/OpenSC/OpenSC/commit/c246f6f69a749d4f68626b40795a4f69168008f4
Patch
Third Party Advisory
https://github.com/OpenSC/OpenSC/compare/0.19.0...0.20.0
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opensc_project:opensc:*:*:*:*:*:*:*:*

Версия до 0.20.0 (исключая)

EPSS

Процентиль: 38%

0.00165

Низкий

6.8 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-415

Связанные уязвимости

CVE-2019-20792

CVSS3: 6.8

ubuntu

почти 6 лет назад

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

CVE-2019-20792

CVSS3: 6.4

redhat

около 6 лет назад

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

CVE-2019-20792

CVSS3: 6.8

debian

почти 6 лет назад

OpenSC before 0.20.0 has a double free in coolkey_free_private_data be ...

GHSA-m2w8-wqfw-qchx

github

больше 3 лет назад

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

ELSA-2020-4483

oracle-oval

около 5 лет назад

ELSA-2020-4483: opensc security, bug fix, and enhancement update (MODERATE)

EPSS

Процентиль: 38%

0.00165

Низкий

6.8 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-415