CVE:CVE-2020-26570
CNNVD:CNNVD-202010-117
OpenSC是一款开源的智能卡工具和中间件。
OpenSC 0.21.0-rc1之前版本存在安全漏洞，该漏洞源于Oberthur智能卡软件驱动程序在sc Oberthur读取文件中存在基于堆的缓冲区溢出。
solution:Upgrade opensc_project opensc to a higher version than 0.20.0,and avoid the version (,0.20.0]; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0