Description
The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6Attack Vector: Local
Complexity: Low
Privileges: Low
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High
Affected Packages2 packages
Also affects: Debian Linux 9.0, Fedora 33
🔴Vulnerability Details
4OSVopensc vulnerabilities↗2022-06-08 GHSAGHSA-547v-83cc-5hqg: The Oberthur smart card software driver in OpenSC before 0↗2022-05-24 CVEListCVE-2020-26570: The Oberthur smart card software driver in OpenSC before 0↗2020-10-06 OSVCVE-2020-26570: The Oberthur smart card software driver in OpenSC before 0↗2020-10-06 📋Vendor Advisories
4UbuntuOpenSC vulnerabilities↗2022-06-08 MicrosoftThe Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file.↗2020-10-13 Red Hatopensc: heap-based buffer overflow in sc_oberthur_read_file↗2020-10-06 DebianCVE-2020-26570: opensc - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-b...↗2020 💬Community
3BugzillaCVE-2020-26570 opensc: heap-based buffer overflow in sc_oberthur_read_file↗2020-10-07 BugzillaCVE-2020-26570 opensc: heap-based buffer overflow in sc_oberthur_read_file [fedora-all]↗2020-10-07 BugzillaCVE-2020-26570 opensc: heap-based buffer overflow in sc_oberthur_read_file [epel-6]↗2020-10-07