CVE-2020-26570

Description

The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file.

Base Score

5.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.051

Vulnerability	OS Platform
Vulnerabilities CVE-2020-26570,CVE-2020-26571,CVE-2020-26572 are affected in OpenSC smartcard framework 0.20.0-rc3	Windows
SUSE-SU-2021:0998-1(SUSE Linux Enterprise Server 12-SP5 ) opensc-0.13.0-3.11.1.x86_64.rpm	Linux
SUSE-SU-2021:0998-1(SUSE Linux Enterprise Server 12-SP5 ) opensc-debuginfo-0.13.0-3.11.1.x86_64.rpm	Linux
SUSE-SU-2021:0998-1(SUSE Linux Enterprise Server 12-SP5 ) opensc-debugsource-0.13.0-3.11.1.x86_64.rpm	Linux
(RHSA-2021:1600) opensc security, bug fix, and enhancement update opensc-0.20.0-4.el8.i686.rpm	Linux
(RHSA-2021:1600) opensc security, bug fix, and enhancement update opensc-0.20.0-4.el8.x86_64.rpm	Linux
(RHSA-2021:1600) opensc security, bug fix, and enhancement update opensc-debugsource-0.20.0-4.el8.i686.rpm	Linux
(RHSA-2021:1600) opensc security, bug fix, and enhancement update opensc-debugsource-0.20.0-4.el8.x86_64.rpm	Linux
opensc security, bug fix, and enhancement update (RLSA-2021:1600) opensc-0.20.0-4.el8.i686.rpm	Linux
opensc security, bug fix, and enhancement update (RLSA-2021:1600) opensc-0.20.0-4.el8.x86_64.rpm	Linux

No records found