CVE-2021-42782

Katalog CVE

CVSS 5.3 · Medium EPSS 2,8%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada opensc project opensc, fedoraproject fedora. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library.

Rincian

Terbit di NVD

18 April 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-787: Out-of-bounds Write

EPSS (30 hari)

2,8% peluang dieksploitasi; lebih tinggi dari 86,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2016448 issue tracking · mailing list · patch · advisory pihak ketiga
• https://github.com/OpenSC/OpenSC/commit/1252aca9 patch · advisory pihak ketiga
• https://github.com/OpenSC/OpenSC/commit/456ac566 patch · advisory pihak ketiga
• https://github.com/OpenSC/OpenSC/commit/7114fb71 patch · advisory pihak ketiga
• https://github.com/OpenSC/OpenSC/commit/78cdab94 patch · advisory pihak ketiga
• https://github.com/OpenSC/OpenSC/commit/ae1cf0be patch · advisory pihak ketiga
• https://security.gentoo.org/glsa/202209-03 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/06/msg00025.html
• https://lists.debian.org/debian-lts-announce/2024/12/msg00026.html