{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "Stack buffer overflow issues in various places",
    "tracking": {
      "current_release_date": "2026-08-11T15:01:01+00:00",
      "generator": {
        "date": "2026-08-11T15:01:01+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2021-42782",
      "initial_release_date": "2021-02-19T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T15:01:01+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.10.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.10.z",
              "product_id": "rhel-8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.0.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.0.0.z",
              "product_id": "rhel-9.0.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.0"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.2.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.2.0.z",
              "product_id": "rhel-9.2.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.4.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.4.z",
              "product_id": "rhel-9.4.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.6.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.6.z",
              "product_id": "rhel-9.6.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.7",
            "product": {
              "name": "Red Hat Enterprise Linux 9.7",
              "product_id": "rhel-9.7",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.7.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.7.z",
              "product_id": "rhel-9.7.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.8",
            "product": {
              "name": "Red Hat Enterprise Linux 9.8",
              "product_id": "rhel-9.8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "opensc",
            "product": {
              "name": "opensc",
              "product_id": "opensc",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/opensc"
              }
            }
          },
          {
            "category": "product_version",
            "name": "opensc-debuginfo",
            "product": {
              "name": "opensc-debuginfo",
              "product_id": "opensc-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/opensc-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "opensc-debugsource",
            "product": {
              "name": "opensc-debugsource",
              "product_id": "opensc-debugsource",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/opensc-debugsource"
              }
            }
          },
          {
            "category": "product_version",
            "name": "opensc",
            "product": {
              "name": "opensc",
              "product_id": "opensc.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/opensc?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:opensc"
        },
        "product_reference": "opensc",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:opensc"
        },
        "product_reference": "opensc",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:opensc"
        },
        "product_reference": "opensc",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:opensc"
        },
        "product_reference": "opensc",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:opensc"
        },
        "product_reference": "opensc",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:opensc"
        },
        "product_reference": "opensc",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:opensc"
        },
        "product_reference": "opensc",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:opensc"
        },
        "product_reference": "opensc",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:opensc-debuginfo"
        },
        "product_reference": "opensc-debuginfo",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:opensc-debuginfo"
        },
        "product_reference": "opensc-debuginfo",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:opensc-debuginfo"
        },
        "product_reference": "opensc-debuginfo",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:opensc-debuginfo"
        },
        "product_reference": "opensc-debuginfo",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debugsource as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:opensc-debugsource"
        },
        "product_reference": "opensc-debugsource",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:opensc-debugsource"
        },
        "product_reference": "opensc-debugsource",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debugsource as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:opensc-debugsource"
        },
        "product_reference": "opensc-debugsource",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc.src as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:opensc.src"
        },
        "product_reference": "opensc.src",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc.src as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8:opensc.src"
        },
        "product_reference": "opensc.src",
        "relates_to_product_reference": "rhel-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc.src as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:opensc.src"
        },
        "product_reference": "opensc.src",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc.src as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:opensc.src"
        },
        "product_reference": "opensc.src",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc.src as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:opensc.src"
        },
        "product_reference": "opensc.src",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc.src as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:opensc.src"
        },
        "product_reference": "opensc.src",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:opensc.src"
        },
        "product_reference": "opensc.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc.src as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:opensc.src"
        },
        "product_reference": "opensc.src",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc.src as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:opensc.src"
        },
        "product_reference": "opensc.src",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-42782",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2021-09-06T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-7-els.els:opensc-debuginfo",
            "rhel-9.0.0.z.eus:opensc",
            "rhel-9.0.0.z.eus:opensc.src",
            "rhel-9.2.0.z.eus:opensc",
            "rhel-9.2.0.z.eus:opensc-debuginfo",
            "rhel-9.2.0.z.eus:opensc-debugsource",
            "rhel-9.2.0.z.eus:opensc.src",
            "rhel-9.4.z.eus:opensc",
            "rhel-9.4.z.eus:opensc-debuginfo",
            "rhel-9.4.z.eus:opensc-debugsource",
            "rhel-9.4.z.eus:opensc.src",
            "rhel-9.6.z.eus:opensc",
            "rhel-9.6.z.eus:opensc-debuginfo",
            "rhel-9.6.z.eus:opensc-debugsource",
            "rhel-9.6.z.eus:opensc.src",
            "rhel-9.7.z:opensc",
            "rhel-9.7.z:opensc.src",
            "rhel-9.7:opensc",
            "rhel-9.7:opensc.src",
            "rhel-9.8:opensc",
            "rhel-9.8:opensc.src"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A stack buffer overflow issue was found in the OpenSC package. This flaw can potentially crash programs using the library.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "rhel-7-els.els:opensc",
          "rhel-7-els.els:opensc.src",
          "rhel-8:opensc.src"
        ],
        "known_not_affected": [
          "rhel-7-els.els:opensc-debuginfo",
          "rhel-9.0.0.z.eus:opensc",
          "rhel-9.0.0.z.eus:opensc.src",
          "rhel-9.2.0.z.eus:opensc",
          "rhel-9.2.0.z.eus:opensc-debuginfo",
          "rhel-9.2.0.z.eus:opensc-debugsource",
          "rhel-9.2.0.z.eus:opensc.src",
          "rhel-9.4.z.eus:opensc",
          "rhel-9.4.z.eus:opensc-debuginfo",
          "rhel-9.4.z.eus:opensc-debugsource",
          "rhel-9.4.z.eus:opensc.src",
          "rhel-9.6.z.eus:opensc",
          "rhel-9.6.z.eus:opensc-debuginfo",
          "rhel-9.6.z.eus:opensc-debugsource",
          "rhel-9.6.z.eus:opensc.src",
          "rhel-9.7.z:opensc",
          "rhel-9.7.z:opensc.src",
          "rhel-9.7:opensc",
          "rhel-9.7:opensc.src",
          "rhel-9.8:opensc",
          "rhel-9.8:opensc.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-42782"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42782"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-42782"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "rhel-8:opensc.src"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Out of support scope",
          "product_ids": [
            "rhel-7-els.els:opensc",
            "rhel-7-els.els:opensc.src"
          ]
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "rhel-7-els.els:opensc",
            "rhel-7-els.els:opensc.src",
            "rhel-8:opensc.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          },
          "products": [
            "rhel-7-els.els:opensc",
            "rhel-7-els.els:opensc-debuginfo",
            "rhel-7-els.els:opensc.src",
            "rhel-8:opensc.src",
            "rhel-9.0.0.z.eus:opensc",
            "rhel-9.0.0.z.eus:opensc.src",
            "rhel-9.2.0.z.eus:opensc",
            "rhel-9.2.0.z.eus:opensc-debuginfo",
            "rhel-9.2.0.z.eus:opensc-debugsource",
            "rhel-9.2.0.z.eus:opensc.src",
            "rhel-9.4.z.eus:opensc",
            "rhel-9.4.z.eus:opensc-debuginfo",
            "rhel-9.4.z.eus:opensc-debugsource",
            "rhel-9.4.z.eus:opensc.src",
            "rhel-9.6.z.eus:opensc",
            "rhel-9.6.z.eus:opensc-debuginfo",
            "rhel-9.6.z.eus:opensc-debugsource",
            "rhel-9.6.z.eus:opensc.src",
            "rhel-9.7.z:opensc",
            "rhel-9.7.z:opensc.src",
            "rhel-9.7:opensc",
            "rhel-9.7:opensc.src",
            "rhel-9.8:opensc",
            "rhel-9.8:opensc.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low",
          "product_ids": [
            "rhel-7-els.els:opensc",
            "rhel-7-els.els:opensc-debuginfo",
            "rhel-7-els.els:opensc.src",
            "rhel-8:opensc.src",
            "rhel-9.0.0.z.eus:opensc",
            "rhel-9.0.0.z.eus:opensc.src",
            "rhel-9.2.0.z.eus:opensc",
            "rhel-9.2.0.z.eus:opensc-debuginfo",
            "rhel-9.2.0.z.eus:opensc-debugsource",
            "rhel-9.2.0.z.eus:opensc.src",
            "rhel-9.4.z.eus:opensc",
            "rhel-9.4.z.eus:opensc-debuginfo",
            "rhel-9.4.z.eus:opensc-debugsource",
            "rhel-9.4.z.eus:opensc.src",
            "rhel-9.6.z.eus:opensc",
            "rhel-9.6.z.eus:opensc-debuginfo",
            "rhel-9.6.z.eus:opensc-debugsource",
            "rhel-9.6.z.eus:opensc.src",
            "rhel-9.7.z:opensc",
            "rhel-9.7.z:opensc.src",
            "rhel-9.7:opensc",
            "rhel-9.7:opensc.src",
            "rhel-9.8:opensc",
            "rhel-9.8:opensc.src"
          ]
        }
      ],
      "title": "Stack buffer overflow issues in various places"
    }
  ]
}