CVE-2021-42778 : A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15

A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.

Published 2022-04-18 17:15:16

Updated 2022-09-29 15:59:50

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2021-42778

Redhat » Enterprise Linux » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux » Version: 8.0
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 33
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Matching versions
Opensc Project » Opensc
Versions before (<) 0.22.0
cpe:2.3:a:opensc_project:opensc:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.10%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 42 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low

CWE-415 Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

Assigned by: nvd@nist.gov (Primary)
CWE-672 Operation on a Resource after Expiration or Release

The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.

Assigned by: secalert@redhat.com (Secondary)

https://github.com/OpenSC/OpenSC/commit/f015746d

idprime: Use temporary variable instead of messing up the passed one · OpenSC/OpenSC@f015746 · GitHub
Patch;Third Party Advisory
https://security.gentoo.org/glsa/202209-03

OpenSC: Multiple Vulnerabilities (GLSA 202209-03) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28185

28185 - opensc:fuzz_pkcs15_reader: Heap-double-free in sc_pkcs15_free_tokeninfo - oss-fuzz
Issue Tracking;Mailing List;Patch;Third Party Advisory

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=2016083

2016083 – (CVE-2021-42778) CVE-2021-42778 opensc: Heap double free in sc_pkcs15_free_tokeninfo
Issue Tracking;Patch;Third Party Advisory

Jump to