CVE-2021-42778: Double Free
Published Oct 20, 2021
·Updated
A heap double free issue was found in Opensc before version 0.22.0 in scpkcs15freetokeninfo.
Affected Software
5 affected componentsFixes available
redhat/opensc<0.22.0
0.22.0
Opensc Project Opensc<0.22.0
Fedoraproject Fedora=33
redhat Enterprise Linux=7.0
redhat Enterprise Linux=8.0
Remediation
Patch Available
Patch Available
Patch Available
Event History
Apr 18, 2022
CVE Published
via MITRE·04:20 PM
Data Sourced
via MITRE·04:20 PM
DescriptionWeakness
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-42778?
CVE-2021-42778 is a heap double free vulnerability found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.
2
What is the severity of CVE-2021-42778?
The severity of CVE-2021-42778 is medium with a CVSS score of 5.3.
3
Which software versions are affected by CVE-2021-42778?
Opensc versions before 0.22.0, Fedora 33, Redhat Enterprise Linux 7.0, Redhat Enterprise Linux 8.0, and redhat/opensc up to version 0.22.0 are affected by CVE-2021-42778.
4
How does CVE-2021-42778 impact the affected software?
CVE-2021-42778 allows an attacker to cause a denial of service or possibly execute arbitrary code by exploiting the heap double free issue in Opensc.
5
How can I fix CVE-2021-42778?
Update to OpenSc version 0.22.0 or later to fix CVE-2021-42778.