Improper Authorization in OpenSC - CVE-2023-40660

Vulnerability identifier: #VU82973

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-40660

CWE-ID: CWE-285

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows an attacker to bypass authorization process.

The vulnerability exists due to a logic error in the authorization process. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. An attacker with physical proximity to the system can bypass the OS logon/screen for small permanently connected tokens to computers.

OpenSC
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE CaaS Platform
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Anolis OS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
Ubuntu
openEuler
Fedora
opensc-pkcs11 (Ubuntu package)
opensc (Ubuntu package)
opensc
opensc-debuginfo
opensc-debugsource
opensc (Red Hat package)
opensc-doc
opensc-help
dev-libs/opensc

Install updates from vendor's website.

OpenSC - update to 0.24.0 rc1
opensc-pkcs11 (Ubuntu package) - addressed in versions Ubuntu Pro, 0.25.1-2ubuntu1.1
opensc (Ubuntu package) - addressed in versions Ubuntu Pro, 0.25.1-2ubuntu1.1
opensc - addressed in versions 0.19.0-150100.3.25.1, 0.22.0-150400.3.6.1
opensc-debuginfo - addressed in versions 0.19.0-150100.3.25.1, 0.22.0-150400.3.6.1
opensc-debugsource - addressed in versions 0.19.0-150100.3.25.1, 0.22.0-150400.3.6.1
opensc (Red Hat package) - addressed in versions 0.20.0-7.el8_9, 0.23.0-3.el9_3
opensc-doc - update to 0.20.0-7.0.1
opensc - update to 0.20.0-7.0.1
opensc - addressed in versions 0.20.0-12, 0.21.0-8
opensc-debuginfo - addressed in versions 0.20.0-12, 0.21.0-8
opensc-debugsource - addressed in versions 0.20.0-12, 0.21.0-8
opensc-help - addressed in versions 0.20.0-12, 0.21.0-8
opensc - update to 0.23.0-3
dev-libs/opensc - update to 0.24.0
opensc - addressed in versions 0.24.0-1.fc38, 0.24.0-1.fc39

• https://github.com/OpenSC/OpenSC/releases/tag/0.24.0-rc1
• https://github.com/OpenSC/OpenSC/wiki/OpenSC-security-advisories
• https://bugzilla.redhat.com/show_bug.cgi?id=2240912
• https://github.com/OpenSC/OpenSC/issues/2792#issuecomment-1674806651
• https://access.redhat.com/security/cve/CVE-2023-40660

• Multiple vulnerabilities in OpenSC
• SUSE update for opensc
• SUSE update for opensc
• Fedora 38 update for opensc
• Fedora 39 update for opensc
• Red Hat Enterprise Linux 9 update for opensc
• Red Hat Enterprise Linux 8 update for opensc
• openEuler 20.03 LTS SP3 update for opensc
• openEuler 22.03 LTS SP2 update for opensc
• Gentoo update for OpenSC
• Amazon Linux AMI update for opensc
• Ubuntu update for opensc
• Ubuntu update for opensc
• Anolis OS update for opensc
• Ubuntu update for opensc