CVE-2019-15945

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.

Updated opensc packages fix security vulnerabilities:

sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv (CVE-2019-6502).

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c (CVE-2019-15945).

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c (CVE-2019-15946).

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute (CVE-2019-19479).

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry (CVE-2019-19480).

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates (CVE-2019-19481).

The opensc package has been updated to version 0.20.0, which has fixes for these issues and other improvements.

This update for opensc fixes the following issues:

• CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746).
• CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747)
• CVE-2019-19479: Fixed an incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256)
• CVE-2019-19480: Fixed an improper free operation in sc_pkcs15_decode_prkdf_entry (bsc#1158307).
• CVE-2019-20792: Fixed a double free in coolkey_free_private_data (bsc#1170809).
• CVE-2020-26570: Fixed a buffer overflow in sc_oberthur_read_file (bsc#1177364).
• CVE-2020-26571: Fixed a stack-based buffer overflow in gemsafe GPK smart card software driver (bsc#1177380)
• CVE-2020-26572: Fixed a stack-based buffer overflow in tcos_decipher (bsc#1177378).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

These are all security issues fixed in the opensc-0.21.0-2.2 package on the GA media of openSUSE Tumbleweed.

This update for opensc fixes the following issues:

• CVE-2020-26571: gemsafe GPK smart card software driver stack-based buffer overflow (bsc#1177380)
• CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747)
• CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746)
• CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256)
• CVE-2020-26572: Prevent out of bounds write (bsc#1177378)
• CVE-2020-26570: Fix buffer overflow in sc_oberthur_read_file (bsc#1177364)

This update for opensc fixes the following issues:

• CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746).
• CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747)
• CVE-2019-19479: Fixed an incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256)
• CVE-2019-19480: Fixed an improper free operation in sc_pkcs15_decode_prkdf_entry (bsc#1158307).
• CVE-2019-20792: Fixed a double free in coolkey_free_private_data (bsc#1170809).
• CVE-2020-26570: Fixed a buffer overflow in sc_oberthur_read_file (bsc#1177364).
• CVE-2020-26571: Fixed a stack-based buffer overflow in gemsafe GPK smart card software driver (bsc#1177380)
• CVE-2020-26572: Fixed a stack-based buffer overflow in tcos_decipher (bsc#1177378).

This update for opensc fixes the following issues:

Security issues fixed:

• CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).
• CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).
• CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000).
• CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).
• CVE-2019-6502: Fixed a memory leak in sc_context_create() (bsc#1122756).
• CVE-2020-26570: Fixed a heap based buffer overflow in sc_oberthur_read_file (bsc#1177364).
• CVE-2020-26572: Prevent out of bounds write (bsc#1177378)
• CVE-2020-26571: gemsafe GPK smart card software driver stack-based buffer overflow (bsc#1177380)
• CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747)
• CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256)
• CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746).
• CVE-2019-19481: Fixed an improper handling of buffer limits for CAC certificates (bsc#1158305).
• CVE-2019-20792: Fixed a double free in coolkey_free_private_data (bsc#1170809).

Non-security issues fixed:

• Fixes segmentation fault in 'pkcs11-tool.c'. (bsc#1114649)

It was discovered that some OpenSC smart card drivers mishandled memory when performing certain decoding operations. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2019-15945, CVE-2019-15946)

It was discovered that some OpenSC smart card drivers had buffer overflow vulnerabilities. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2020-26570, CVE-2020-26571, CVE-2020-26572)