CVE-2024-45618: Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init
A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs.
Insufficient or missing checking of return values of functions leads to unexpected work with variables that have not been initialized.
Other sources
The reported issues are part of the card enrollment process using the pkcs15-init tool. The attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs, so they are considered high complexity and low severity.
Insufficient or missing checking of return values of functions leads to unexpected work with variables that have not been initialized. The uninitialized variables were reflected in the following functions:
- strlen, called from setstring - scbuildpin - DESsetkeyunchecked, called from opensslenc
Originally reported by Matteo Marini (Sapienza University of Rome)
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/openscto a version that resolves this vulnerability.Fixed in 0.21.0-1+deb11u1Fixed in 0.23.0-0.3+deb12u2Fixed in 0.26.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45618?
CVE-2024-45618 has been classified with a severity level that indicates significant security risks when exploited.
How do I fix CVE-2024-45618?
To mitigate CVE-2024-45618, ensure your OpenSC software and Red Hat Enterprise Linux are updated to the latest versions provided by the vendors.
What systems are affected by CVE-2024-45618?
CVE-2024-45618 affects Red Hat Enterprise Linux versions 7.0, 8.0, 9.0, and OpenSC versions prior to 0.26.0.
What type of attack does CVE-2024-45618 allow?
CVE-2024-45618 allows an attacker to exploit the vulnerability using a specially crafted USB device or smart card.
What are the potential consequences of CVE-2024-45618?
Exploitation of CVE-2024-45618 could lead to unexpected behavior or system compromise due to improper handling of response values.