CVE-2023-4535
Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys
Summary
Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys
Original description
The description as published by the source.
An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-4535 opensc Fixed in: 0.23.0-0.3+deb12u1
References
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report bugzilla.redhat.com
- report github.com
- web access.redhat.com
- web github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org