PT-2023-12250 · Opensc+1 · Opensc+1

CVE-2021-34193 · Publicado 2021-08-10 · Atualizado 2024-12-28

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions OpenSC smart card middleware versions prior to 0.23

Description A stack overflow issue exists in the OpenSC smart card middleware due to crafted responses to APDUs, which can lead to a stack overflow.

Recommendations For versions prior to 0.23, update to version 0.23 or later to resolve the issue.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

AZL-28094

BDU:2025-03986

CVE-2021-34193

DLA-4004-1

Produtos afetados

Astra Linux

Opensc

Referências · 40

• https://github.com/OpenSC/OpenSC/commit/1252aca9f10771ef5ba8405e73cf2da50827958f · Nota
• https://github.com/OpenSC/OpenSC/commit/5df913b7f57ad89b9832555d24c08d23a534311e · Nota
• https://github.com/OpenSC/OpenSC/commit/17d8980cde7be597afc366b7e311d0d7cadcb1f4 · Nota
• https://github.com/OpenSC/OpenSC/commit/ae1cf0be90396fb6c0be95829bf0d3eecbd2fd1c · Nota
• https://github.com/OpenSC/OpenSC/commit/40c50a3a4219308aae90f6efd7b10213794a8d86 · Nota
• https://github.com/OpenSC/OpenSC/commit/f015746d22d249642c19674298a18ad824db0ed7 · Nota
• https://github.com/OpenSC/OpenSC/commit/78cdab949f098ad7e593d853229fccf57d749d0c · Nota
• https://github.com/OpenSC/OpenSC/commit/05648b0604bf3e498e8d42dff3c6e7c56a5bf749 · Nota
• https://github.com/OpenSC/OpenSC/commit/7114fb71b54ddfe06ce5dfdab013f4c38f129d14 · Nota
• https://github.com/OpenSC/OpenSC/commit/1db88374bb7706a115d5c3617c6f16115c33bf27 · Nota
• https://github.com/OpenSC/OpenSC/issues/2841 · Nota
• https://github.com/OpenSC/OpenSC/commit/d353a46d0444bb34ca28a3dcc884afe196f851b6 · Nota
• https://github.com/OpenSC/OpenSC/commit/715c17c469f6c463dd511a5deb229da4de9ee100 · Nota
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28855 · Nota
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27719 · Nota