OpenSC Multiple Vulnerabilities (Sep 2024) - Linux

OpenSC is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:opensc-project:opensc"; if descripti...

RHSA-2024:0967 Red Hat Security Advisory: opensc security update

Bulletin has no description...

RHSA-2024:0966 Red Hat Security Advisory: opensc security update

Bulletin has no description...

RHSA-2023:7879 Red Hat Security Advisory: opensc security update

Bulletin has no description...

RHSA-2023:7876 Red Hat Security Advisory: opensc security update

Bulletin has no description...

RHSA-2023:7160 Red Hat Security Advisory: opensc security and bug fix update

Bulletin has no description...

RHSA-2023:6587 Red Hat Security Advisory: opensc security update

Bulletin has no description...

RHSA-2021:1600 Red Hat Security Advisory: opensc security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2020:4483 Red Hat Security Advisory: opensc security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2019:2154 Red Hat Security Advisory: opensc security, bug fix, and enhancement update

Bulletin has no description...

AZL-49081 CVE-2024-8443 affecting package opensc 0.23.0-5

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

OpenSC 安全漏洞

OpenSC is an open source smart card tool and middleware from OpenSC Open Source. A security vulnerability exists in OpenSC, which stems from the presence of a heap-based buffer overflow vulnerability, where a well-designed USB device or smart card responding maliciously to APDUs could result in...

SUSE CVE-2024-45615

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. The problem is missing initialization of variables expected to be initialized as arguments to other functions, etc...

SUSE CVE-2024-45616

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following problems were caused by insufficient control of the response AP...

SUSE CVE-2024-45617

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to...

SUSE CVE-2024-45618

A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to unexpected work with variables that have...

SUSE CVE-2024-45619

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer...

AZL-48817 CVE-2024-45620 affecting package opensc 0.23.0-5

A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accesse...

CVE-2024-45618

A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to unexpected work with variables that have...

CVE-2024-45620

A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accesse...