CVE-2019-6502
published 2019-01-22CVE-2019-6502: sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.
PriorityP430high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
2.20%
80.5th percentile
sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | opensc | < opensc 0.20.0-1 (bookworm) | opensc 0.20.0-1 (bookworm) |
| chrome_chrome | — | — | |
| opensc_project | opensc | — | — |
| opensc_project | opensc | >= 0 < 0.20.0-1 | 0.20.0-1 |
| opensc_project | opensc | >= 0 < 0.20.0-1 | 0.20.0-1 |
| opensc_project | opensc | >= 0 < 0.20.0-1 | 0.20.0-1 |
| opensc_project | opensc | >= 0 < 0.20.0-1 | 0.20.0-1 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5LOW
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Chrome
Stable Channel Update for Desktop: CVE-2020-6411
vendor_chrome·2020-02-04·CVSS 5.4
CVE-2020-6411 [LOW] Stable Channel Update for Desktop: CVE-2020-6411
Stable Channel Update for Desktop
CVE-2020-6411: Insufficient validation of untrusted input in Omnibox. Reported by Khalil Zhani on 2019-02-07
[$500][ 785159 ] Low CVE-2020-6502: Incorrect security UI in permissions
Reported by evi1m0 of Bilibili Security Team on 2017-11-15
Severity: low
Red Hat
opensc: memory leak in sc_context_create in ctx.c in libopensc
vendor_redhat·2019-01-20·CVSS 7.5
CVE-2019-6502 [HIGH] CWE-400 opensc: memory leak in sc_context_create in ctx.c in libopensc
opensc: memory leak in sc_context_create in ctx.c in libopensc
sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.
Package: opensc (Red Hat Enterprise Linux 7) - Not affected
Package: opensc (Red Hat Enterprise Linux 8) - Not affected
Debian
CVE-2019-6502: opensc - sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as d...
vendor_debian·2019·CVSS 7.5
CVE-2019-6502 [HIGH] CVE-2019-6502: opensc - sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as d...
sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.
Scope: local
bookworm: resolved (fixed in 0.20.0-1)
bullseye: resolved (fixed in 0.20.0-1)
forky: resolved (fixed in 0.20.0-1)
sid: resolved (fixed in 0.20.0-1)
trixie: resolved (fixed in 0.20.0-1)
GHSA
GHSA-wfg8-cwx5-w8xc: sc_context_create in ctx
ghsa_unreviewed·2022-05-13
CVE-2019-6502 [HIGH] CWE-401 GHSA-wfg8-cwx5-w8xc: sc_context_create in ctx
sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.
OSV
CVE-2019-6502: sc_context_create in ctx
osv·2019-01-22·CVSS 7.5
CVE-2019-6502 [HIGH] CVE-2019-6502: sc_context_create in ctx
sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.
No detection rules found.
No public exploits indexed.
http://www.openwall.com/lists/oss-security/2019/12/29/1https://github.com/OpenSC/OpenSC/issues/1586https://lists.debian.org/debian-lts-announce/2023/06/msg00025.htmlhttp://www.openwall.com/lists/oss-security/2019/12/29/1https://github.com/OpenSC/OpenSC/issues/1586https://lists.debian.org/debian-lts-announce/2023/06/msg00025.html
2019-01-22
Published