Use-after-free in OpenSC - CVE-2019-19480

Vulnerability details

The vulnerability allows a local user to compromise vulnerable system.

The vulnerability exists due to a use-after-free error within the sc_pkcs15_decode_prkdf_entry() function in libopensc/pkcs15-prkey.c. A local user can pass specially crafted data to the application, trigger a use-after-free error and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Affected software

How to mitigate CVE-2019-19480

External References

• http://www.openwall.com/lists/oss-security/2019/12/29/1
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18478
• https://github.com/OpenSC/OpenSC/commit/6ce6152284c47ba9b1d4fe8ff9d2e6a3f5ee02c7
• https://github.com/OpenSC/OpenSC/releases/tag/0.20.0

Related Security Bulletins

• Multiple vulnerabilities in OpenSC
• Arch Linux update for opensc
• Use-after-free in opensc (Alpine package)
• SUSE update for opensc
• Fedora 31 update for opensc