Heap-based buffer overflow in OpenSC - CVE-2021-42781

Vulnerability identifier: #VU66141

CSH Severity: Low

CVSS v4: 1 [CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-42781

CWE-ID: CWE-122

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows an attacker with physical access to perform denial of service attack.

The vulnerability exists due to a boundary error in Opensc before in pkcs15-oberthur.c. An attacker with physical access can pass specially crafted data to the application, trigger a heap-based buffer overflow and perform denial of service attack.

OpenSC
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
openEuler
opensc
opensc-debuginfo
opensc-debugsource
opensc-32bit
opensc-32bit-debuginfo
opensc-help
dev-libs/opensc

Install updates from vendor's website.

OpenSC - update to 0.22.0
opensc - addressed in versions 0.13.0-3.19.1, 0.18.0-150000.3.23.1, 0.19.0-150100.3.16.1
opensc-debuginfo - addressed in versions 0.13.0-3.19.1, 0.18.0-150000.3.23.1, 0.19.0-150100.3.16.1
opensc-debugsource - addressed in versions 0.13.0-3.19.1, 0.18.0-150000.3.23.1, 0.19.0-150100.3.16.1
opensc-32bit - update to 0.19.0-150100.3.16.1
opensc-32bit-debuginfo - update to 0.19.0-150100.3.16.1
opensc - update to 0.20.0-8
opensc-debuginfo - update to 0.20.0-8
opensc-debugsource - update to 0.20.0-8
opensc-help - update to 0.20.0-8
dev-libs/opensc - update to 0.22.0

• https://bugzilla.redhat.com/show_bug.cgi?id=2016439
• https://github.com/OpenSC/OpenSC/commit/17d8980c
• https://github.com/OpenSC/OpenSC/commit/5d4daf6c
• https://github.com/OpenSC/OpenSC/commit/40c50a3a
• https://github.com/OpenSC/OpenSC/commit/05648b06
• https://github.com/OpenSC/OpenSC/commit/cae5c71f

• Multiple vulnerabilities in OpenSC
• Gentoo update for OpenSC
• SUSE update for opensc
• SUSE update for opensc
• SUSE update for opensc
• openEuler 20.03 LTS SP1 update for opensc