SUSE-SU-2021:0998-1: opensc&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2021:0998-1 is a vulnerability in opensc&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 31-03-2021PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for opensc This update for opensc fixes the following issues: - CVE-2020-26571: gemsafe GPK smart card software driver stack-based buffer overflow (bsc#1177380) - CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747) - CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746) - CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256) - CVE-2020-26572: Prevent out of bounds write (bsc#1177378) - CVE-2020-26570: Fix buffer overflow in sc_oberthur_read_file (bsc#1177364)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- opensc&distro=SUSE Linux Enterprise Server 12 SP5< 0.13.0-3.11.1
- opensc&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 0.13.0-3.11.1
1 vendor · 2 products