PT-2019-6162 · Opensc+7 · Opensc+7

Publicado

2019-09-05

·

Atualizado

2024-06-15

·

CVE-2019-15946

CVSS v3.1

6.4

Média

VetorAV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.20.0-rc1
Description The issue is related to an out-of-bounds access of an ASN.1 Octet string in the asn1 decode entry function in libopensc/asn1.c. This can allow an attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations For versions prior to 0.20.0-rc1, update to version 0.20.0-rc1 or later to resolve the issue. As a temporary workaround, consider restricting access to the asn1 decode entry function in libopensc/asn1.c until a patch is available.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2020-1884
ALT-PU-2020-2900
BDU:2022-00332
CESA-2020_4483
CVE-2019-15946
DLA-1916-1
DLA-2832-1
MGASA-2020-0026
OPENSUSE-SU-2021:0565-1
OPENSUSE-SU-2021_0565-1
OPENSUSE-SU-2024:11123-1
RHSA-2020:4483
RHSA-2020_4483
SUSE-SU-2021:0998-1
SUSE-SU-2021:1168-1
SUSE-SU-2022:1041-1
USN-5281-1

Produtos afetados

Alt Linux
Astra Linux
Centos
Linuxmint
Opensc
Red Hat
Suse
Ubuntu