OSV-2023-753

    Dashboard / Vulnerabilities / OSV-2023-753

    OSV-2023-753

    Published: 28 Aug 2023Last Modified: 28 Aug 2023

    Summary: Stack-buffer-overflow in iasecc_crt_parse

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61797 ``` Crash type: Stack-buffer-overflow READ 1 Crash state: iasecc_crt_parse iasecc_se_parse iasecc_se_get_info ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61797

    Affected packages

    Package

    Name: opensc

    Purl: pkg:generic/opensc

    Affected ranges

    Type: GIT

    Events:

    Introduced- ac8d87751607fcc8669bd63891ecaad1a466f718
    Fixed -2a4921ab23fd0853f327517636c50de947548161

    Affected versions

    0.23.0
    0.23.0-rc1
    0.23.0-rc2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-753 | CVE-DB