Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-45615
HistorySep 03, 2024 - 10:15 p.m.

CVE-2024-45615

2024-09-0322:15:04
Debian Security Bug Tracker
security-tracker.debian.org
3
vulnerability
opensc
pkcs#11 module
usb device
smart card
buffer
unix

CVSS3

3.9

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

4.3

Confidence

High

EPSS

0

Percentile

13.4%

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. The problem is missing initialization of variables expected to be initialized (as arguments to other functions, etc.).

CVSS3

3.9

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

4.3

Confidence

High

EPSS

0

Percentile

13.4%

Related for DEBIANCVE:CVE-2024-45615