CVE-2023-4535
Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys
概要
Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-4535 opensc 修正版: 0.23.0-0.3+deb12u1
参照URL
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report bugzilla.redhat.com
- report github.com
- web access.redhat.com
- web github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org