CVE-2019-20792: Double Free
Published Apr 29, 2020
·Updated
OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check.
Affected Software
1 affected component
Opensc Project Opensc<0.20.0
Remediation
Event History
Apr 29, 2020
CVE Published
via MITRE·03:53 AM
Data Sourced
via MITRE·03:53 AM
Description
Frequently Asked Questions
1
What is CVE-2019-20792?
CVE-2019-20792 is a vulnerability in OpenSC before version 0.20.0 that allows for a double free in the coolkey_free_private_data function.
2
How does CVE-2019-20792 affect OpenSC?
CVE-2019-20792 affects OpenSC versions up to but not including 0.20.0.
3
How severe is CVE-2019-20792?
CVE-2019-20792 has a severity rating of 6.8 (medium).
4
How can I fix CVE-2019-20792?
To fix CVE-2019-20792, update OpenSC to version 0.20.0 or higher.
5
What is the CWE ID for CVE-2019-20792?
The CWE ID for CVE-2019-20792 is 415.