PT-2019-15852 · Opensc+2 · Opensc+2

Publicado

2019-12-01

·

Atualizado

2024-06-15

·

CVE-2019-19480

CVSS v3.1

4.6

Média

VetorAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions OpenSC versions 0.19.0 and earlier OpenSC versions 0.20.x through 0.20.0-rc3
Description An issue was discovered in the libopensc/pkcs15-prkey.c file, where there is an incorrect free operation in the sc pkcs15 decode prkdf entry function.
Recommendations For OpenSC versions 0.19.0 and earlier, update to a version later than 0.19.0 to resolve the issue. For OpenSC versions 0.20.x through 0.20.0-rc3, update to a version later than 0.20.0-rc3 to resolve the issue. As a temporary workaround, consider restricting access to the sc pkcs15 decode prkdf entry function until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-672

Identificadores relacionados

ALT-PU-2020-1884
ALT-PU-2020-2900
CVE-2019-19480
MGASA-2020-0026
OPENSUSE-SU-2021:0565-1
OPENSUSE-SU-2021_0565-1
OPENSUSE-SU-2024:11123-1
SUSE-SU-2021:1168-1

Produtos afetados

Alt Linux
Opensc
Suse