CVE Vulnerabilities

CVE-2019-19480

Operation on a Resource after Expiration or Release

Published: Dec 01, 2019 | Modified: Nov 07, 2023
CVSS 3.x
4.6
MEDIUM
Source:
NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
4.6 MODERATE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.

Weakness

The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.

Affected Software

Name Vendor Start Version End Version
Opensc Opensc_project * 0.19.0 (including)
Opensc Opensc_project 0.20.0-rc1 (including) 0.20.0-rc1 (including)
Opensc Opensc_project 0.20.0-rc2 (including) 0.20.0-rc2 (including)
Opensc Opensc_project 0.20.0-rc3 (including) 0.20.0-rc3 (including)
Opensc Ubuntu trusty *

References