OSV-2023-1228

    Dashboard / Vulnerabilities / OSV-2023-1228

    OSV-2023-1228

    Published: 27 Nov 2023Last Modified: 27 Nov 2023

    Summary: Stack-buffer-overflow in asn1_decode_entry

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64522 ``` Crash type: Stack-buffer-overflow READ 8 Crash state: asn1_decode_entry asn1_decode _sc_asn1_decode ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64522

    Affected packages

    Package

    Name: opensc

    Purl: pkg:generic/opensc

    Affected ranges

    Type: GIT

    Events:

    Introduced- b5ee4184376c5653871fc7af03255538f7d647e8
    Fixed -2fb0d735b433a7d5618865be5280e41e78362b5e

    Affected versions

    0.24.0-rc1
    0.24.0-rc2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-1228 | CVE-DB