This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-20792 →

DEBIAN-CVE-2019-20792

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 opensc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-1"}]}]

Debian:13 opensc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-1"}]}]

Debian:14 opensc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-1"}]}]