Buffer overflow in OpenSC - CVE-2024-45620

Vulnerability identifier: #VU98506

CSH Severity: Low

CVSS v4: 1 [CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-45620

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows an attacker to bypass implemented security restrictions.

The vulnerability exists due to a boundary error in the pkcs15-init tool in OpenSC. An attacker with physical access to the system can use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accessed.

OpenSC
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Anolis OS
opensc-pkcs11 (Ubuntu package)
opensc (Ubuntu package)
opensc
opensc-debuginfo
opensc-debugsource
opensc-help
opensc-32bit
opensc-64bit-debuginfo
opensc-64bit
opensc-32bit-debuginfo
opensc-libs
opensc-doc

Install updates from vendor's website.

OpenSC - update to 0.26.0 rc1
opensc-pkcs11 (Ubuntu package) - addressed in versions Ubuntu Pro, 0.25.1-2ubuntu1.1
opensc (Ubuntu package) - addressed in versions Ubuntu Pro, 0.25.1-2ubuntu1.1
opensc - addressed in versions 0.13.0-3.31.1, 0.19.0-150100.3.31.1, 0.22.0-150400.3.12.1, 0.22.0-150600.11.3.1
opensc-debuginfo - addressed in versions 0.13.0-3.31.1, 0.19.0-150100.3.31.1, 0.22.0-150400.3.12.1, 0.22.0-150600.11.3.1
opensc-debugsource - addressed in versions 0.13.0-3.31.1, 0.19.0-150100.3.31.1, 0.22.0-150400.3.12.1, 0.22.0-150600.11.3.1
opensc-help - update to 0.21.0-11
opensc-debugsource - update to 0.21.0-11
opensc-debuginfo - update to 0.21.0-11
opensc - update to 0.21.0-11
opensc-32bit - addressed in versions 0.22.0-150400.3.12.1, 0.22.0-150600.11.3.1
opensc-64bit-debuginfo - addressed in versions 0.22.0-150400.3.12.1, 0.22.0-150600.11.3.1
opensc-64bit - addressed in versions 0.22.0-150400.3.12.1, 0.22.0-150600.11.3.1
opensc-32bit-debuginfo - addressed in versions 0.22.0-150400.3.12.1, 0.22.0-150600.11.3.1
opensc - update to 0.26.1-1
opensc-libs - update to 0.26.1-1
opensc-doc - update to 0.26.1-1

• https://bugzilla.redhat.com/show_bug.cgi?id=2309289
• https://github.com/OpenSC/OpenSC/releases/tag/0.26.0-rc1
• https://github.com/advisories/GHSA-9c2g-6v5v-57qg
• https://github.com/OpenSC/OpenSC/pull/3225

• Multiple vulnerabilities in OpenSC
• SUSE update for opensc
• SUSE update for opensc
• SUSE update for opensc
• SUSE update for opensc
• openEuler update for opensc
• Ubuntu update for opensc
• Ubuntu update for opensc
• Ubuntu update for opensc
• Anolis OS update for opensc