CVE-2024-45617: Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc
A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs.
Insufficient or missing checking of return values of functions leads to unexpected work with variables that have not been initialized.
Other sources
The reported issues are part of the libopensc library, which makes them accessible from OpenSC tools, PKCS#11 module, minidriver, or CTK. The attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs, so they are considered high complexity and low severity.
Insufficient or missing checking of return values of functions leads to unexpected work with variables that have not been initialized. The uninitialized variables were reflected in the following functions:
- bcdmp, called from caclistcomparepath - cardoslifecycleget - scpkcs15readfile
Originally reported by Matteo Marini (Sapienza University of Rome)
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/openscto a version that resolves this vulnerability.Fixed in 0.21.0-1+deb11u1Fixed in 0.23.0-0.3+deb12u2Fixed in 0.26.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45617?
CVE-2024-45617 has not been assigned a specific severity rating, but its exploitation can allow attackers to manipulate system responses via crafted devices.
How do I fix CVE-2024-45617?
To address CVE-2024-45617, users should upgrade their OpenSC tools and Red Hat Enterprise Linux to the latest security patches.
Which versions of Red Hat are affected by CVE-2024-45617?
CVE-2024-45617 affects Red Hat Enterprise Linux versions 7.0, 8.0, and 9.0.
What types of devices can exploit CVE-2024-45617?
CVE-2024-45617 can be exploited using crafted USB devices or Smart Cards presenting malicious APDU responses.
Is OpenSC affected by CVE-2024-45617?
Yes, OpenSC versions prior to 0.26.0 are vulnerable to CVE-2024-45617.