CVE-2021-42778: Double Free
First published: Wed Oct 20 2021(Updated: )
A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Opensc Project Opensc | <0.22.0 | |
| Fedoraproject Fedora | =33 | |
| Redhat Enterprise Linux | =7.0 | |
| Redhat Enterprise Linux | =8.0 | |
| redhat/opensc | <0.22.0 | 0.22.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-42778?
CVE-2021-42778 is a heap double free vulnerability found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.
What is the severity of CVE-2021-42778?
The severity of CVE-2021-42778 is medium with a CVSS score of 5.3.
Which software versions are affected by CVE-2021-42778?
Opensc versions before 0.22.0, Fedora 33, Redhat Enterprise Linux 7.0, Redhat Enterprise Linux 8.0, and redhat/opensc up to version 0.22.0 are affected by CVE-2021-42778.
How does CVE-2021-42778 impact the affected software?
CVE-2021-42778 allows an attacker to cause a denial of service or possibly execute arbitrary code by exploiting the heap double free issue in Opensc.
How can I fix CVE-2021-42778?
Update to OpenSc version 0.22.0 or later to fix CVE-2021-42778.
- collector/nvd-index
- collector/redhat-bugzilla
- alias/CVE-2021-42778
- vendor/opensc project
- canonical/opensc project opensc
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/33
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/7.0
- version/redhat enterprise linux/8.0
- package-manager/redhat