{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2021-42782", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "dateUpdated": "2024-08-04T03:38:50.101Z", "dateReserved": "2021-10-21T00:00:00", "datePublished": "2022-04-18T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2023-06-21T00:00:00"}, "descriptions": [{"lang": "en", "value": "Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library."}], "affected": [{"vendor": "n/a", "product": "opensc", "versions": [{"version": "opensc 0.22.0", "status": "affected"}]}], "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2016448"}, {"url": "https://github.com/OpenSC/OpenSC/commit/78cdab94"}, {"url": "https://github.com/OpenSC/OpenSC/commit/7114fb71"}, {"url": "https://github.com/OpenSC/OpenSC/commit/1252aca9"}, {"url": "https://github.com/OpenSC/OpenSC/commit/ae1cf0be"}, {"url": "https://github.com/OpenSC/OpenSC/commit/456ac566"}, {"name": "GLSA-202209-03", "tags": ["vendor-advisory"], "url": "https://security.gentoo.org/glsa/202209-03"}, {"name": "[debian-lts-announce] 20230621 [SECURITY] [DLA 3463-1] opensc security update", "tags": ["mailing-list"], "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00025.html"}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-119", "cweId": "CWE-119"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T03:38:50.101Z"}, "title": "CVE Program Container", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2016448", "tags": ["x_transferred"]}, {"url": "https://github.com/OpenSC/OpenSC/commit/78cdab94", "tags": ["x_transferred"]}, {"url": "https://github.com/OpenSC/OpenSC/commit/7114fb71", "tags": ["x_transferred"]}, {"url": "https://github.com/OpenSC/OpenSC/commit/1252aca9", "tags": ["x_transferred"]}, {"url": "https://github.com/OpenSC/OpenSC/commit/ae1cf0be", "tags": ["x_transferred"]}, {"url": "https://github.com/OpenSC/OpenSC/commit/456ac566", "tags": ["x_transferred"]}, {"name": "GLSA-202209-03", "tags": ["vendor-advisory", "x_transferred"], "url": "https://security.gentoo.org/glsa/202209-03"}, {"name": "[debian-lts-announce] 20230621 [SECURITY] [DLA 3463-1] opensc security update", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00025.html"}]}]}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:opensc_project:opensc:*:*:*:*:*:*:*:*", "matchCriteriaId": "B75A7FDD-CA09-46EF-8FAC-11732898B84B", "versionEndExcluding": "0.22.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", "matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library."}, {"lang": "es", "value": "Se han encontrado problemas de desbordamiento del buffer de pila en Opensc versiones anteriores a 0.22.0, en varios lugares que podr\u00edan bloquear los programas usando la biblioteca"}], "id": "CVE-2021-42782", "lastModified": "2024-11-21T06:28:09.977", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-04-18T17:15:16.380", "references": [{"source": "secalert@redhat.com", "tags": ["Issue Tracking", "Mailing List", "Patch", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2016448"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSC/OpenSC/commit/1252aca9"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSC/OpenSC/commit/456ac566"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSC/OpenSC/commit/7114fb71"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSC/OpenSC/commit/78cdab94"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSC/OpenSC/commit/ae1cf0be"}, {"source": "secalert@redhat.com", "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00025.html"}, {"source": "secalert@redhat.com", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/202209-03"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Mailing List", "Patch", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2016448"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSC/OpenSC/commit/1252aca9"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSC/OpenSC/commit/456ac566"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSC/OpenSC/commit/7114fb71"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSC/OpenSC/commit/78cdab94"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenSC/OpenSC/commit/ae1cf0be"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00025.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/202209-03"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "secalert@redhat.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "opensc: Stack buffer overflow issues in various places", "id": "2016448", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2016448"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-119", "details": ["Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library.", "A stack buffer overflow issue was found in the OpenSC package. This flaw can potentially crash programs using the library."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2021-42782", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "opensc", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "opensc", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "opensc", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2021-02-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-42782\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-42782"], "threat_severity": "Low"}