CVE-2020-26572: Buffer Overflow
Published Oct 6, 2020
·Updated
The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcosdecipher.
Affected Software
3 affected components
Opensc Project Opensc<=0.20.0
Fedoraproject Fedora=33
Debian Debian Linux=9.0
Remediation
Event History
Oct 6, 2020
CVE Published
via MITRE·01:03 AM
Data Sourced
via MITRE·01:03 AM
Description
Frequently Asked Questions
1
What is CVE-2020-26572?
CVE-2020-26572 is a vulnerability in the TCOS smart card software driver in OpenSC before 0.21.0-rc1, which allows a stack-based buffer overflow in tcos_decipher.
2
How does CVE-2020-26572 affect OpenSC?
CVE-2020-26572 affects OpenSC versions up to and including 0.20.0.
3
Which software and operating systems are affected by CVE-2020-26572?
OpenSC versions up to and including 0.20.0, Fedora 33, and Debian Linux 9.0 are affected by CVE-2020-26572.
4
What is the severity of CVE-2020-26572?
CVE-2020-26572 has a severity level of 5.5 (medium).
5
How can I fix CVE-2020-26572?
To fix CVE-2020-26572, update to OpenSC version 0.21.0-rc1 or later.