CVE-2021-42781

概要

参考情報

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• OpenSC/OpenSC commit 05648b0 · Patch
• OpenSC/OpenSC commit 17d8980 · Patch
• OpenSC/OpenSC commit 40c50a3 · Patch
• OpenSC/OpenSC commit 5d4daf6 · Patch
• OpenSC/OpenSC commit cae5c71 · Patch
• lists.debian.org/debian-lts-announce/2023/06/msg00025.html
• security.gentoo.org/glsa/202209-03 · Third Party Advisory
• lists.debian.org/debian-lts-announce/2024/12/msg00026.html

opensc のその他の脆弱性

• CVE-2026-40528高 7.8OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/…
• CVE-2026-40510中 6.8OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/…
• CVE-2025-66215中 6.8OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the t…
• CVE-2025-66038中 6.8OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sc_compacttlv_find_tag searches a compact-TLV buffer for …
• CVE-2025-66037中 6.8OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness…