Lucene search

K
fedoraFedoraFEDORA:88967203CFE9
HistoryDec 23, 2023 - 4:35 a.m.

[SECURITY] Fedora 38 Update: opensc-0.24.0-1.fc38

2023-12-2304:35:04
lists.fedoraproject.org
17
fedora 38 update
smart cards
cryptographic operations
authentication
mail encryption
digital signatures
pkcs#11
pkcs#15
compatibility

CVSS3

6.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

31.0%

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the PKCS#11 API so applications supporting this API (such as Mozilla Firefox and Thunderbird) can use it. On the card OpenSC implements the PKCS#15 standard and aims to be compatible with every software/card that does so, too.

OSVersionArchitecturePackageVersionFilename
Fedora38anyopensc< 0.24.0UNKNOWN

CVSS3

6.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

31.0%