The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1600 advisory.

  - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in     sc_oberthur_read_file. (CVE-2020-26570)

  - The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow     in sc_pkcs15emu_gemsafeGPK_init. (CVE-2020-26571)

  - The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in     tcos_decipher. (CVE-2020-26572)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5281-1 advisory.

    It was discovered that some OpenSC smart card drivers mishandled memory when performing certain decoding     operations. An attacker could possibly use this issue to cause a denial of service or other unspecified     impact. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2019-15945, CVE-2019-15946)

    It was discovered that some OpenSC smart card drivers had buffer overflow vulnerabilities. An attacker     could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2020-26570,     CVE-2020-26571, CVE-2020-26572)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of opensc installed on the remote host is prior to 0.19.0-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2262 advisory.

    OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in     libopensc/asn1.c. (CVE-2019-15945)

    OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in     libopensc/asn1.c. (CVE-2019-15946)

    An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c     has an incorrect read operation during parsing of a SETCOS file attribute. (CVE-2019-19479)

    OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in     libopensc/card-coolkey.c lacks a uniqueness check. (CVE-2019-20792)

    The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in     sc_oberthur_read_file. (CVE-2020-26570)

    The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow     in sc_pkcs15emu_gemsafeGPK_init. (CVE-2020-26571)

    The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in     tcos_decipher. (CVE-2020-26572)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the opensc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in     libopensc/card-coolkey.c lacks a uniqueness check. (CVE-2019-20792)

  - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in     sc_oberthur_read_file. (CVE-2020-26570)

  - The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow     in sc_pkcs15emu_gemsafeGPK_init. (CVE-2020-26571)

  - The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in     tcos_decipher. (CVE-2020-26572)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.02, has opensc packages installed that are affected by multiple vulnerabilities:

  - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in     sc_oberthur_read_file. (CVE-2020-26570)

  - The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow     in sc_pkcs15emu_gemsafeGPK_init. (CVE-2020-26571)

  - The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in     tcos_decipher. (CVE-2020-26572)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1041-1 advisory.

  - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in     libopensc/asn1.c. (CVE-2019-15945)

  - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in     libopensc/asn1.c. (CVE-2019-15946)

  - An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c     has an incorrect read operation during parsing of a SETCOS file attribute. (CVE-2019-19479)

  - An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c     mishandles buffer limits for CAC certificates. (CVE-2019-19481)

  - OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in     libopensc/card-coolkey.c lacks a uniqueness check. (CVE-2019-20792)

  - sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from     eidenv. (CVE-2019-6502)

  - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in     sc_oberthur_read_file. (CVE-2020-26570)

  - The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow     in sc_pkcs15emu_gemsafeGPK_init. (CVE-2020-26571)

  - The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in     tcos_decipher. (CVE-2020-26572)

  - A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. (CVE-2021-42779)

  - A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could     potentially crash programs using the library. (CVE-2021-42780)

  - Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could     potentially crash programs using the library. (CVE-2021-42781)

  - Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could     potentially crash programs using the library. (CVE-2021-42782)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2021:1600 advisory.

  - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in     sc_oberthur_read_file. (CVE-2020-26570)

  - The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow     in sc_pkcs15emu_gemsafeGPK_init. (CVE-2020-26571)

  - The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in     tcos_decipher. (CVE-2020-26572)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2832 advisory.

  - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in     libopensc/asn1.c. (CVE-2019-15945)

  - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in     libopensc/asn1.c. (CVE-2019-15946)

  - An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c     has an incorrect read operation during parsing of a SETCOS file attribute. (CVE-2019-19479)

  - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in     sc_oberthur_read_file. (CVE-2020-26570)

  - The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow     in sc_pkcs15emu_gemsafeGPK_init. (CVE-2020-26571)

  - The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in     tcos_decipher. (CVE-2020-26572)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-1600 advisory.

    - Fix CVE-2020-26570, CVE-2020-26571 and CVE-2020-26572

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1600 advisory.

  - opensc: heap-based buffer overflow in sc_oberthur_read_file (CVE-2020-26570)

  - opensc: stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init (CVE-2020-26571)

  - opensc: stack-based buffer overflow in tcos_decipher (CVE-2020-26572)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1600 advisory.

    The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on     cards that support cryptographic operations and enables their use for authentication, mail encryption, or     digital signatures.

    Security Fix(es):

    * opensc: heap-based buffer overflow in sc_oberthur_read_file (CVE-2020-26570)

    * opensc: stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init (CVE-2020-26571)

    * opensc: stack-based buffer overflow in tcos_decipher (CVE-2020-26572)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for opensc fixes the following issues :

&#9; - CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746).

  - CVE-2019-15946: Fixed an out-of-bounds access of an     ASN.1 Octet string in asn1_decode_entry (bsc#1149747)

  - CVE-2019-19479: Fixed an incorrect read operation during     parsing of a SETCOS file attribute (bsc#1158256)

  - CVE-2019-19480: Fixed an improper free operation in     sc_pkcs15_decode_prkdf_entry (bsc#1158307).

  - CVE-2019-20792: Fixed a double free in     coolkey_free_private_data (bsc#1170809). 

  - CVE-2020-26570: Fixed a buffer overflow in     sc_oberthur_read_file (bsc#1177364).

  - CVE-2020-26571: Fixed a stack-based buffer overflow in     gemsafe GPK smart card software driver (bsc#1177380)

  - CVE-2020-26572: Fixed a stack-based buffer overflow in     tcos_decipher (bsc#1177378).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for opensc fixes the following issues :

CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746).

CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747)

CVE-2019-19479: Fixed an incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256)

CVE-2019-19480: Fixed an improper free operation in sc_pkcs15_decode_prkdf_entry (bsc#1158307).

CVE-2019-20792: Fixed a double free in coolkey_free_private_data (bsc#1170809).

CVE-2020-26570: Fixed a buffer overflow in sc_oberthur_read_file (bsc#1177364).

CVE-2020-26571: Fixed a stack-based buffer overflow in gemsafe GPK smart card software driver (bsc#1177380)

CVE-2020-26572: Fixed a stack-based buffer overflow in tcos_decipher (bsc#1177378).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for opensc fixes the following issues :

CVE-2020-26571: gemsafe GPK smart card software driver stack-based buffer overflow (bsc#1177380)

CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747)

CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746)

CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256)

CVE-2020-26572: Prevent out of bounds write (bsc#1177378)

CVE-2020-26570: Fix buffer overflow in sc_oberthur_read_file (bsc#1177364)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the opensc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The Oberthur smart card software driver in OpenSC     before 0.21.0-rc1 has a heap-based buffer overflow in     sc_oberthur_read_file.(CVE-2020-26570)

  - The gemsafe GPK smart card software driver in OpenSC     before 0.21.0-rc1 has a stack-based buffer overflow in     sc_pkcs15emu_gemsafeGPK_init.(CVE-2020-26571)

  - The TCOS smart card software driver in OpenSC before     0.21.0-rc1 has a stack-based buffer overflow in     tcos_decipher.(CVE-2020-26572)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
184715	Rocky Linux 8 : opensc (RLSA-2021:1600)	Nessus	Rocky Linux Local Security Checks	medium
183174	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : OpenSC vulnerabilities (USN-5281-1)	Nessus	Ubuntu Local Security Checks	medium
181721	Amazon Linux 2 : opensc (ALAS-2023-2262)	Nessus	Amazon Linux Local Security Checks	medium
161577	EulerOS 2.0 SP3 : opensc (EulerOS-SA-2022-1752)	Nessus	Huawei Local Security Checks	medium
160814	NewStart CGSL MAIN 6.02 : opensc Multiple Vulnerabilities (NS-SA-2022-0062)	Nessus	NewStart CGSL Local Security Checks	medium
159349	SUSE SLES15 Security Update : opensc (SUSE-SU-2022:1041-1)	Nessus	SuSE Local Security Checks	medium
157488	AlmaLinux 8 : opensc (ALSA-2021:1600)	Nessus	Alma Linux Local Security Checks	medium
155721	Debian DLA-2832-1 : opensc - LTS security update	Nessus	Debian Local Security Checks	medium
149937	Oracle Linux 8 : opensc (ELSA-2021-1600)	Nessus	Oracle Linux Local Security Checks	medium
149730	CentOS 8 : opensc (CESA-2021:1600)	Nessus	CentOS Local Security Checks	medium
149657	RHEL 8 : opensc (RHSA-2021:1600)	Nessus	Red Hat Local Security Checks	medium
148763	openSUSE Security Update : opensc (openSUSE-2021-565)	Nessus	SuSE Local Security Checks	medium
148502	SUSE SLED15 / SLES15 Security Update : opensc (SUSE-SU-2021:1168-1)	Nessus	SuSE Local Security Checks	medium
148269	SUSE SLES12 Security Update : opensc (SUSE-SU-2021:0998-1)	Nessus	SuSE Local Security Checks	medium
145731	EulerOS 2.0 SP8 : opensc (EulerOS-SA-2021-1158)	Nessus	Huawei Local Security Checks	medium

Detections

Analytics

CVE-2020-26572

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium