Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9c2g-6v5v-57qg

Опубликовано: 04 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.9

Описание

A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accessed.

A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accessed.

EPSS

Процентиль: 22%
0.00293
Низкий

3.9 Low

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 3.9
ubuntu
почти 2 года назад

A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accessed.

CVSS3: 3.9
redhat
почти 2 года назад

A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accessed.

CVSS3: 3.9
nvd
почти 2 года назад

A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accessed.

CVSS3: 3.9
msrc
11 месяцев назад

Libopensc: incorrect handling of the length of buffers or files in pkcs15init

CVSS3: 3.9
debian
почти 2 года назад

A vulnerability was found in the pkcs15-init tool in OpenSC. An attack ...

EPSS

Процентиль: 22%
0.00293
Низкий

3.9 Low

CVSS3

Дефекты

CWE-120