CVE-2023-4535
Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys
Résumé
Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-4535 opensc Corrigé dans: 0.23.0-0.3+deb12u1
Références
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report bugzilla.redhat.com
- report github.com
- web access.redhat.com
- web github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org