REDHAT-BUG-2309288: Low severity OpenSC libopensc vulnerability
The reported issues are part of the libopensc library, which makes them accessible from OpenSC tools, PKCS#11 module, minidriver, or CTK. The attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs, so they are considered high complexity and low severity.
When buffers are partially filled with data, uninitialized parts of the buffer can be incorrectly accessed. The uninitialized variables were reflected in the following functions:
- insertcert - asn1encodepath - gemsafegetcertlen - setcosgeneratekey - schsmdeterminefreeid - coolkeyrsaop
Originally reported by Matteo Marini (Sapienza University of Rome)
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2309288?
The severity of REDHAT-BUG-2309288 is considered high due to the potential for exploitation via crafted USB devices or smart cards.
How do I fix REDHAT-BUG-2309288?
To fix REDHAT-BUG-2309288, ensure that you update the OpenSC libopensc library to the latest patched version.
What components are affected by REDHAT-BUG-2309288?
REDHAT-BUG-2309288 affects the OpenSC tools, PKCS#11 module, minidriver, and CTK that utilize the libopensc library.
What type of attack is associated with REDHAT-BUG-2309288?
The attack associated with REDHAT-BUG-2309288 involves the use of a crafted USB device or smart card presenting malicious responses to APDUs.
Is user intervention required to trigger REDHAT-BUG-2309288?
Yes, user intervention is required as the vulnerability is exploited through physical access to the system via a crafted device.