OpenSC: Several Vulnerabilities Regarding to Version 0.20.0

[CamberLoid]

CVE IDs

CVE-2021-{42778..42782}, CVE-2020-{26570..26572}

Other security advisory IDs

• Gentoo: https://security.gentoo.org/glsa/202209-03
• Debian: https://lists.debian.org/debian-lts-announce/2021/11/msg00027.html
• Openwall: http://www.openwall.com/lists/oss-security/2020/11/24/4

Description

A total of 8 CVEs for OpenSC (opensc) were found and fixed between version 0.20.0 (current) and 0.22.0 (latest).

• CVE-2020-26570: Heap-based buffer overflow in sc_oberthur_read_file. (CWE-787 Out-of-bounds write)
• CVE-2020-26571: Stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init.
• CVE-2020-26572: Stack-based buffer overflow in tcos_decipher.
• CVE-2021-42778: Heap double-free in sc_pkcs15_free_tokeninfo.
• CVE-2021-42779: Heap use-after-free sc_file_valid.
• CVE-2021-42780: Use-after-return in insert_pin function that could potentially crash programs using the library.
• CVE-2021-42781: Heap buffer overflow in pkcs15-oberthur.c.
• CVE-2021-42782: Stack buffer overflow in various place.

Patches

An update to 0.22.0 or later will solve these problems.

PoC(s)

N/A

[CamberLoid]

Fixed via #4290