CVE-2019-20792
published 2020-04-29CVE-2019-20792: OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.
medium6.8CVSS 3.1
AVPACLPRNUINSUCHIHAH
OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | opensc | < opensc 0.20.0-1 (bookworm) | opensc 0.20.0-1 (bookworm) |
| opensc_project | opensc | < 0.20.0 | 0.20.0 |
| opensc_project | opensc | >= 0 < 0.20.0-1 | 0.20.0-1 |
| opensc_project | opensc | >= 0 < 0.20.0-1 | 0.20.0-1 |
| opensc_project | opensc | >= 0 < 0.20.0-1 | 0.20.0-1 |
| opensc_project | opensc | >= 0 < 0.20.0-1 | 0.20.0-1 |
CVSS provenance
nvdv3.16.8MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv6.8MEDIUM