Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-45615
HistorySep 03, 2024 - 12:00 a.m.

CVE-2024-45615

2024-09-0300:00:00
ubuntu.com
ubuntu.com
1
opensc
pkcs#11 module
ctk
usb device
smart card
buffer access
unix

CVSS3

3.9

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

7

Confidence

Low

EPSS

0

Percentile

13.4%

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module,
minidriver, and CTK. An attacker could use a crafted USB Device or Smart
Card, which would present the system with a specially crafted response to
APDUs. When buffers are partially filled with data, initialized parts of
the buffer can be incorrectly accessed.

CVSS3

3.9

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

7

Confidence

Low

EPSS

0

Percentile

13.4%