CVE:CVE-2020-26571
CNNVD:CNNVD-202010-119
OpenSC是一款开源的智能卡工具和中间件。
OpenSC 0.21-rc1之前版本存在安全漏洞，该漏洞源于gemsafeGPK智能卡软件驱动程序在sc pkcs15emu gemsafeGPK init中有一个基于堆栈的缓冲区溢出。
solution:Upgrade opensc_project opensc to a higher version than 0.20.0,and avoid the version (,0.20.0]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33