REDHAT-BUG-2309290: Low severity OpenSC libopensc vulnerability
The reported issues are part of the libopensc library, which makes them accessible from OpenSC tools, PKCS#11 module, minidriver, or CTK. The attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs, so they are considered high complexity and low severity.
The following problems were caused by insufficient control of the response APDU buffer and its length when communicating with the card. The uninitialized variables were reflected in these functions:
- cardosmatchcard - itoaword, called from schexdump - scbintohex - strcmp, called from scasn1readtag - asn1decode - processfcp - dnieprocessfci - iso7816processfci - scpkcs15initparseinfo, mscextractrsapublickey - scbintohex - gidsreadmasterfile - scbintohex
Originally reported by Matteo Marini (Sapienza University of Rome)
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2309290?
The severity of REDHAT-BUG-2309290 is considered high due to its potential exploitation through crafted USB devices or smart cards.
How do I fix REDHAT-BUG-2309290?
To fix REDHAT-BUG-2309290, ensure you apply the latest patches for the libopensc library provided by your distribution.
What components are affected by REDHAT-BUG-2309290?
The components affected by REDHAT-BUG-2309290 include the OpenSC tools, PKCS#11 module, minidriver, and the libopensc library itself.
Who is primarily impacted by REDHAT-BUG-2309290?
Users and systems relying on the libopensc library for smart card operations are primarily impacted by REDHAT-BUG-2309290.
What types of attacks can exploit REDHAT-BUG-2309290?
REDHAT-BUG-2309290 can be exploited through specially crafted responses from malicious USB devices or smart cards that send tailored APDU responses.