CVE:CVE-2021-42778
CNNVD:CNNVD-202204-3670
OpenSC是一款开源的智能卡工具和中间件。
OpenSC 0.22.0 版本之前的 sc_pkcs15_free_tokeninfo 存在资源管理错误漏洞，该漏洞源于 sc_pkcs15_free_tokeninfo 中发现了堆多重释放问题。
solution:Upgrade opensc_project opensc to a higher version than 0.22.0,and avoid the version (,0.22.0); Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0