Lucene search
+L

134 matches found

BDU FSTEC
BDU FSTEC
•added 2024/12/13 12:00 a.m.•14 views

The vulnerability of the pkcs15-init personalization utility and the libopensc library, which are part of the software tools and libraries for working with smart cards in OpenSC, allows a violator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pkcs15-init personalization utility and the libopensc library related to the OpenSC software suite involves the use of uninitialized variables due to incorrect checks on the return values of functions. Exploiting this vulnerability could allow an attacker to compromise th...

3.9CVSS6.5AI score0.00327EPSS
SaveExploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
•added 2024/12/13 12:00 a.m.•15 views

The vulnerability of the pkcs15-init personalization utility and the libopensc library, which are part of the software tools and libraries for working with smart cards in OpenSC, allows a violator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pkcs15-init personalization utility and the libopensc library related to the OpenSC software suite involves the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

3.9CVSS6.5AI score0.00358EPSS
SaveExploits0References12Affected Software7
Amazon
Amazon
•added 2024/12/12 12:00 a.m.•17 views

Low: opensc

Issue Overview: It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially crafted response to APDUs in a USB device or a smart card. CVE-2024-45615 It is caused by th...

4.3CVSS7.2AI score0.00358EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/12/12 12:00 a.m.•20 views

The vulnerability of the pkcs15-init personalization utility and the libopensc library, which are part of the software tools and libraries for working with smart cards in OpenSC, allows a violator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the pkcs15-init personalization utility and the libopensc library related to the OpenSC software suite involves the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected informati...

3.9CVSS6.5AI score0.00358EPSS
SaveExploits0References15Affected Software8
Amazon
Amazon
•added 2024/12/12 12:00 a.m.•24 views

Low: opensc

Issue Overview: It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially crafted response to APDUs in a USB device or a smart card. CVE-2024-45615 It is caused by th...

4.3CVSS7.3AI score0.00358EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/12/11 12:00 a.m.•26 views

Amazon Linux 2023 : opensc (ALAS2023-2024-775)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-775 advisory. It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially...

4.3CVSS6AI score0.00358EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/09/11 3:14 a.m.•10 views

SUSE CVE-2024-8443

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

3.4CVSS8.1AI score0.00321EPSS
SaveExploits0References10
attackerkb
attackerkb
•added 2024/09/10 2:15 p.m.•11 views

CVE-2024-8443

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS7.1AI score0.00321EPSS
SaveExploits0References3Affected Software4
OSV
OSV
•added 2024/09/10 2:15 p.m.•30 views

AZL-49059 CVE-2024-8443 affecting package opensc for versions less than 0.26.1-1

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS7.1AI score0.00321EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/10 2:15 p.m.•9 views

DEBIAN-CVE-2024-8443

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS6.8AI score0.00321EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/10 2:15 p.m.•39 views

CVE-2024-8443

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS0.00321EPSS
SaveExploits0References3
OSV
OSV
•added 2024/09/10 2:15 p.m.•21 views

UBUNTU-CVE-2024-8443

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS7.5AI score0.00321EPSS
SaveExploits0References6
Prion
Prion
•added 2024/09/10 2:15 p.m.•18 views

CVE-2024-8443

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS0.00321EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/09/10 1:16 p.m.•65 views

CVE-2024-8443 Libopensc: heap buffer overflow in openpgp driver when generating key

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS0.00321EPSS
SaveExploits0References2
OSV
OSV
•added 2024/09/10 1:16 p.m.•41 views

CVE-2024-8443 Libopensc: heap buffer overflow in openpgp driver when generating key

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS7.1AI score
SaveExploits0References7
Debian CVE
Debian CVE
•added 2024/09/10 1:16 p.m.•24 views

CVE-2024-8443

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS6.7AI score0.00321EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/09/10 1:16 p.m.•29 views

CVE-2024-8443 Libopensc: heap buffer overflow in openpgp driver when generating key

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS8.4AI score0.00321EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2024/09/10 1:16 p.m.•40 views

CVE-2024-8443

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS4.5AI score0.00321EPSS
SaveExploits0
CVE
CVE
•added 2024/09/10 1:16 p.m.•132 views

CVE-2024-8443

CVE-2024-8443 is a heap-based buffer overflow in the libopensc OpenPGP driver. A crafted USB device or smart card that replies to APDUs during enrollment via pkcs15-init can trigger out-of-bounds access, potentially allowing arbitrary code execution. Public-affecting reports reference the OpenSC ...

2.9CVSS4.7AI score0.00321EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/10 12:00 a.m.•3 views

CVE-2024-8443: Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

2.9CVSS7.1AI score0.00321EPSS
SaveExploits0References5
Rows per page
Query Builder