-
Byte Open Security
(ByteOS Network)
Log In
Sign Up
NVD Vulnerability Details :
CVE-2021-42778
Analyzed
More Info
Official Page
Source
-
secalert@redhat.com
View Known Exploited Vulnerability (KEV) details
Published At
-
18 Apr, 2022 | 17:15
Updated At
-
29 Sep, 2022 | 15:59
A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.
CISA Catalog
Date Added
Due Date
Vulnerability Name
Required Action
N/A
Metrics
Type
Version
Base score
Base severity
Vector
Primary
3.1
5.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Primary
2.0
5.0
MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
CPE Matches
opensc_project
opensc_project
>>
opensc
>>
Versions before 0.22.0(exclusive)
cpe:2.3:a:opensc_project:opensc:*:*:*:*:*:*:*:*
Fedora Project
fedoraproject
>>
fedora
>>
33
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Red Hat, Inc.
redhat
>>
enterprise_linux
>>
7.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Red Hat, Inc.
redhat
>>
enterprise_linux
>>
8.0
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Load More
Weaknesses
CWE ID
Type
Source
CWE-415
Primary
nvd@nist.gov
CWE-672
Secondary
secalert@redhat.com
Evaluator Description
Evaluator Impact
Evaluator Solution
Vendor Statements
References
Hyperlink
Source
Resource
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28185
secalert@redhat.com
Issue Tracking
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2016083
secalert@redhat.com
Issue Tracking
Patch
Third Party Advisory
https://github.com/OpenSC/OpenSC/commit/f015746d
secalert@redhat.com
Patch
Third Party Advisory
https://security.gentoo.org/glsa/202209-03
secalert@redhat.com
Third Party Advisory
Change History
0
Changes found
Details not found