Note:
This project will be discontinued after December 13, 2021. [more]
2019-09-05
OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.
Products | Debian_linux, Fedora, Opensc |
Type | Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) |
First patch | - None (likely due to unavailable code) |
Patches |
• https://github.com/OpenSC/OpenSC/commit/a3fc7693f3a035a8a7921cffb98432944bb42740
• https://github.com/OpenSC/OpenSC/compare/f1691fc...12218d4 |
Links |
• http://www.openwall.com/lists/oss-security/2019/12/29/1
• https://lists.debian.org/debian-lts-announce/2021/11/msg00027.html • https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html • https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDSQLMZZYBHO5X3BK7D6E7E6NZIMZDI5/ |