OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade opensc | May 4, 2022 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade openscUpgrade opensc-debuginfo | Sep 21, 2023 | Apr 29, 2020 |
| Centos_linux | — | Upgrade opensc-debuginfoUpgrade openscUpgrade opensc-debugsource | Nov 5, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade opensc | Jul 30, 2024 | Apr 29, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade opensc | May 25, 2022 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade opensc | Nov 13, 2020 | Jan 4, 2020 |
| Redhat_linux | — | Upgrade opensc-debuginfoUpgrade openscUpgrade opensc-debugsource | Nov 5, 2020 | Apr 29, 2020 |
| Suse | — | Upgrade opensc-32bitUpgrade opensc | Apr 17, 2021 | Apr 29, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub