CVE-2023-4535

2023-11-0616:57:45

Alpine Linux Development Team

security.alpinelinux.org

opensc

myeid driver

symmetric key encryption

physical access

apdu responses

security compromise

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

24.4%

JSON

An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system’s security.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchopensc< 0.24.0-r0UNKNOWN
Alpine3.19-communitynoarchopensc< 0.24.0-r0UNKNOWN
Alpine3.20-communitynoarchopensc< 0.24.0-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	opensc	< 0.24.0-r0	UNKNOWN
Alpine	3.19-community	noarch	opensc	< 0.24.0-r0	UNKNOWN
Alpine	3.20-community	noarch	opensc	< 0.24.0-r0	UNKNOWN