Debian Opensc vulnerabilities

CVE-2021-34193 [HIGH] CVE-2021-34193: opensc - Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via cra... Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs. Scope: local bookworm: resolved (fixed in 0.22.0-1) bullseye: resolved (fixed in 0.21.0-1+deb11u1) forky: resolved (fixed in 0.22.0-1) sid: resolved (fixed in 0.22.0-1) trixie: resolved (fixed in 0.22.0-1)

CVE-2010-4523 [HIGH] CVE-2010-4523: opensc - Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier... Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c. Scope: local bookworm: resolved (fixed in 0.11.13-1.1) bullseye: resolved (fixed in 0.11.13-1.1) forky

CVE-2009-0368 [LOW] CVE-2009-0368: opensc - OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PI... OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program. Scope: local bookworm: resolved (fixed in 0.11.7-1) bullseye: resolved (fixed in 0.11.7-1) fo

CVE-2023-2977 [HIGH] CVE-2023-2977: opensc - A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vu... A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is wrongly caculated due to moved starting pointer. This leads to

CVE-2019-6502 [HIGH] CVE-2019-6502: opensc - sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as d... sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv. Scope: local bookworm: resolved (fixed in 0.20.0-1) bullseye: resolved (fixed in 0.20.0-1) forky: resolved (fixed in 0.20.0-1) sid: resolved (fixed in 0.20.0-1) trixie: resolved (fixed in 0.20.0-1)

CVE-2025-66215 [LOW] CVE-2025-66215: opensc - OpenSC is an open source smart card tools and middleware. Prior to version 0.27.... OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow WRITE in card-oberthur. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. Thi

CVE-2025-49010 [LOW] CVE-2025-49010: opensc - OpenSC is an open source smart card tools and middleware. Prior to version 0.27.... OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This

CVE-2023-5992 [MEDIUM] CVE-2023-5992: opensc - A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is n... A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data. Scope: local bookworm: resolved (fixed in 0.23.0-0.3+deb12u2) bullseye: resolved (fixed in 0.21.0-1+deb11u1) forky: resolved (fixed in 0.25.0~rc1-1) sid: resolved (fixed in 0.25.0~rc1-1)

CVE-2009-1603 [HIGH] CVE-2009-1603: opensc - src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecif... src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted. Scope: local bookworm: resolved (fixed in 0.11.8) bullseye: resolved (fixed in 0.11.8) forky: resolved (fixe

CVE-2023-40660 [MEDIUM] CVE-2023-40660: opensc - A flaw was found in OpenSC packages that allow a potential PIN bypass. When a to... A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small, permanently connected tokens to computers. Additionally,

CVE-2025-66038 [LOW] CVE-2025-66038: opensc - OpenSC is an open source smart card tools and middleware. Prior to version 0.27.... OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sc_compacttlv_find_tag searches a compact-TLV buffer for a given tag. In compact-TLV, a single byte encodes the tag (high nibble) and value length (low nibble). With a 1-byte buffer {0x0A}, the encoded element claims tag=0 and length=10 but no value bytes follow. Calling sc_compacttlv_f

CVE-2023-40661 [MEDIUM] CVE-2023-40661: opensc - Several memory vulnerabilities were identified within the OpenSC packages, parti... Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and employ a custom-crafted USB device or smart card to manipulate responses to APDUs. This

CVE-2025-66037 [LOW] CVE-2025-66037: opensc - OpenSC is an open source smart card tools and middleware. Prior to version 0.27.... OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This i

CVE-2021-42781 [MEDIUM] CVE-2021-42781: opensc - Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15... Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library. Scope: local bookworm: resolved (fixed in 0.22.0-1) bullseye: resolved (fixed in 0.21.0-1+deb11u1) forky: resolved (fixed in 0.22.0-1) sid: resolved (fixed in 0.22.0-1) trixie: resolved (fixed in 0.22.0-1)

CVE-2021-42779 [MEDIUM] CVE-2021-42779: opensc - A heap use after free issue was found in Opensc before version 0.22.0 in sc_file... A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. Scope: local bookworm: resolved (fixed in 0.22.0-1) bullseye: resolved (fixed in 0.21.0-1+deb11u1) forky: resolved (fixed in 0.22.0-1) sid: resolved (fixed in 0.22.0-1) trixie: resolved (fixed in 0.22.0-1)

CVE-2021-42782 [MEDIUM] CVE-2021-42782: opensc - Stack buffer overflow issues were found in Opensc before version 0.22.0 in vario... Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library. Scope: local bookworm: resolved (fixed in 0.22.0-1) bullseye: resolved (fixed in 0.21.0-1+deb11u1) forky: resolved (fixed in 0.22.0-1) sid: resolved (fixed in 0.22.0-1) trixie: resolved (fixed in 0.22.0-1)

CVE-2021-42780 [MEDIUM] CVE-2021-42780: opensc - A use after return issue was found in Opensc before version 0.22.0 in insert_pin... A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library. Scope: local bookworm: resolved (fixed in 0.22.0-1) bullseye: resolved (fixed in 0.21.0-1+deb11u1) forky: resolved (fixed in 0.22.0-1) sid: resolved (fixed in 0.22.0-1) trixie: resolved (fixed in 0.22.0-1)

CVE-2021-42778 [MEDIUM] CVE-2021-42778: opensc - A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_... A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. Scope: local bookworm: resolved (fixed in 0.22.0-1) bullseye: resolved (fixed in 0.21.0-1+deb11u1) forky: resolved (fixed in 0.22.0-1) sid: resolved (fixed in 0.22.0-1) trixie: resolved (fixed in 0.22.0-1)

CVE-2020-26571 [MEDIUM] CVE-2020-26571: opensc - The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a sta... The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init. Scope: local bookworm: resolved (fixed in 0.21.0-1) bullseye: resolved (fixed in 0.21.0-1) forky: resolved (fixed in 0.21.0-1) sid: resolved (fixed in 0.21.0-1) trixie: resolved (fixed in 0.21.0-1)

CVE-2020-26572 [MEDIUM] CVE-2020-26572: opensc - The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-base... The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher. Scope: local bookworm: resolved (fixed in 0.21.0-1) bullseye: resolved (fixed in 0.21.0-1) forky: resolved (fixed in 0.21.0-1) sid: resolved (fixed in 0.21.0-1) trixie: resolved (fixed in 0.21.0-1)