PT-2023-12250 · Opensc+1 · Opensc+1

Published 2021-08-10 · Updated 2024-12-28 · CVE-2021-34193

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions OpenSC smart card middleware versions prior to 0.23

Description A stack overflow issue exists in the OpenSC smart card middleware due to crafted responses to APDUs, which can lead to a stack overflow.

Recommendations For versions prior to 0.23, update to version 0.23 or later to resolve the issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

AZL-28094

BDU:2025-03986

CVE-2021-34193

DLA-4004-1

Affected Products

Astra Linux

Opensc

References · 40

• https://osv.dev/vulnerability/CVE-2021-34193 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-34193 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4004-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-34193 · Security Note
• https://osv.dev/vulnerability/AZL-28094 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-34193 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-34193 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-34193 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE82 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-34193 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-03986 · Security Note
• https://github.com/OpenSC/OpenSC/commit/1252aca9f10771ef5ba8405e73cf2da50827958f · Note
• https://github.com/OpenSC/OpenSC/commit/5df913b7f57ad89b9832555d24c08d23a534311e · Note
• https://github.com/OpenSC/OpenSC/commit/17d8980cde7be597afc366b7e311d0d7cadcb1f4 · Note