Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2mjg-798r-mxwh

Опубликовано: 04 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.9

Описание

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accessed.

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accessed.

EPSS

Процентиль: 28%
0.00355
Низкий

3.9 Low

CVSS3

Дефекты

CWE-457
CWE-908

Связанные уязвимости

CVSS3: 3.9
ubuntu
почти 2 года назад

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following problems were caused by insufficient control of the response APDU buffer and its length when communicating with the card.

CVSS3: 3.9
redhat
почти 2 года назад

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following problems were caused by insufficient control of the response APDU buffer and its length when communicating with the card.

CVSS3: 3.9
nvd
почти 2 года назад

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following problems were caused by insufficient control of the response APDU buffer and its length when communicating with the card.

CVSS3: 3.9
msrc
11 месяцев назад

Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc

CVSS3: 3.9
debian
почти 2 года назад

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, min ...

EPSS

Процентиль: 28%
0.00355
Низкий

3.9 Low

CVSS3

Дефекты

CWE-457
CWE-908