CVE-2023-40661 affecting package opensc for versions less than 0.25.1-3

CVE-2023-40661 affecting package opensc for versions less than 0.25.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2024-1454 affecting package opensc for versions less than 0.25.1-3

CVE-2024-1454 affecting package opensc for versions less than 0.25.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2023-40660 affecting package opensc for versions less than 0.25.1-3

CVE-2023-40660 affecting package opensc for versions less than 0.25.1-3. An upgraded version of the package is available that resolves this issue...

SUSE SLES12 Security Update : opensc (SUSE-SU-2024:1625-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1625-1 advisory. - CVE-2023-5992: Fixed a side-channel leaks while stripping encryption PKCS1 padding bsc1219386 Tenable has extracted the preceding...

SUSE: Security Advisory (SUSE-SU-2024:1625-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:1625-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2023-5992: Fixed a side-channel leaks while stripping encryption PKCS1 padding bsc1219386...

PT-2024-9391

Name of the Vulnerable Software and Affected Versions: OpenSC affected versions not specified Description: A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. This issue arises when a crafted USB device or smart card provides malicious responses to the APDUs duri...

RHEL 7 : opensc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - opensc: Double free in coolkeyfreeprivatedata in libopensc/card-coolkey.c CVE-2019-20792 - opensc: buffer...

Fedora 40 : opensc (2024-3dbc3e8105)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-3dbc3e8105 advisory. New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454 Tenable has extracted the preceding description block directly from the...

CentOS 9 : opensc-0.23.0-3.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the opensc-0.23.0-3.el9 build changelog. - Potential PIN bypass CVE-2023-40660 - Dynamic analyzers reports in pkcs15init CVE-2023-40661 - Out-of-bounds read in MyEID driver handlin...

CentOS 9 : opensc-0.23.0-4.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the opensc-0.23.0-4.el9 build changelog. - Side-channel leaks while stripping encryption PKCS1.5 padding CVE-2023-5992 Note that Nessus has not tested for this issue but has instead relied...

The vulnerability of the AuthentIC driver for software tools and libraries used to work with OpenSC smart cards allows a perpetrator to compromise card management operations.

The vulnerability of the AuthentIC driver for software tools and libraries used to work with OpenSC smart cards is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise card management operations...

openSUSE Security Advisory (SUSE-SU-2024:1402-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : opensc (SUSE-SU-2024:1402-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1402-1 advisory. - CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS1 padding bsc1219386 Tenable has...

SUSE-SU-2024:1402-2 Security update for opensc

This update for opensc fixes the following issues: - CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS1 padding bsc1219386...

SUSE-SU-2024:1402-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS1 padding bsc1219386...

ROS-20240422-01

Vulnerability in the OpenSC smart card software toolkit and libraries is related to a bug in the AuthentIC driver and occurs during card registration using pkcs15-init. a bug in the AuthentIC driver and occurs during the card registration process using pkcs15-init, when a user or administrator...

Mageia: Security Advisory (MGASA-2024-0101)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the MyEID driver of the software and library used for working with OpenSC smart cards allows a perpetrator to potentially gain unauthorized access to confidential data.

The vulnerability of the MyEID driver for software tools and libraries used to work with OpenSC smart cards lies in the fact that it allows reading beyond the memory buffer boundaries during the processing of symmetric-key encryption. Exploiting this vulnerability could potentially allow an...

The vulnerability of the programmatic tools and libraries used for working with OpenSC smart cards stems from improper restrictions on operations within memory buffers. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the programmatic tools and libraries used to work with OpenSC smart cards is related to memory errors during card registration using the pkcs15-init function. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...