https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:42:50 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:7876 <p><strong>Affected:</strong> AlmaLinux:8: opensc</p> <p>The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures.</p> <p>Security Fix(es):</p> <p>* OpenSC: Potential PIN bypass when card tracks its own login state (CVE-2023-40660) * OpenSC: multiple memory issues with pkcs15-init (enrollment tool) (CVE-2023-40661)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: opensc</p> <p>The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures.</p> <p>Security Fix(es):</p> <p>* OpenSC: Potential PIN bypass when card tracks its own login state (CVE-2023-40660) * OpenSC: multiple memory issues with pkcs15-init (enrollment tool) (CVE-2023-40661)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:7876 https://cve.radiocsirt.org/vuln/bdu:2024-02589 bdu:2024-02589 https://cve.radiocsirt.org/vuln/bdu:2024-02589 https://cve.radiocsirt.org/vuln/euvd-2026-260290 EUVD-2026-260290 https://cve.radiocsirt.org/vuln/euvd-2026-260290 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40660 <p>A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small, permanently connected tokens to computers. Additionally, the token can internally track login status. This flaw allows an attacker to gain unauthorized access, carry out malicious actions, or compromise the system without the user&#39;s awareness.</p> <p>A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small, permanently connected tokens to computers. Additionally, the token can internally track login status. This flaw allows an attacker to gain unauthorized access, carry out malicious actions, or compromise the system without the user&#39;s awareness.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-40660 https://cve.radiocsirt.org/vuln/ghsa-7635-x5f9-5458 <p>A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small, permanently connected tokens to computers. Additionally, the token can internally track login status. This flaw allows an attacker to gain unauthorized access, carry out malicious actions, or compromise the system without the user&#39;s awareness.</p> <p>A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small, permanently connected tokens to computers. Additionally, the token can internally track login status. This flaw allows an attacker to gain unauthorized access, carry out malicious actions, or compromise the system without the user&#39;s awareness.</p> https://cve.radiocsirt.org/vuln/ghsa-7635-x5f9-5458 https://cve.radiocsirt.org/vuln/gsd-2023-40660 gsd-2023-40660 https://cve.radiocsirt.org/vuln/gsd-2023-40660 https://cve.radiocsirt.org/vuln/msrc_cve-2023-40660 msrc_CVE-2023-40660 https://cve.radiocsirt.org/vuln/msrc_cve-2023-40660 https://cve.radiocsirt.org/vuln/oesa-2023-1766 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP3: opensc</p> <p>OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the standard APIs to smart cards, e.g. PKCS#11 API, Windows’ Smart Card Minidriver and macOS Tokend. Security Fix(es): VUL-0: CVE-2023-40660: opensc: PIN bypass when card tracks its own login state(CVE-2023-40660)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP3: opensc</p> <p>OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the standard APIs to smart cards, e.g. PKCS#11 API, Windows’ Smart Card Minidriver and macOS Tokend. Security Fix(es): VUL-0: CVE-2023-40660: opensc: PIN bypass when card tracks its own login state(CVE-2023-40660)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1766 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13314-1 <p>opensc-0.23.0-3.1 on GA media</p> <p>opensc-0.23.0-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13314-1 https://cve.radiocsirt.org/vuln/suse-su-2023:4104-1 <p>Security update for opensc</p> <p>Security update for opensc</p> https://cve.radiocsirt.org/vuln/suse-su-2023:4104-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-40660 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: opensc, Ubuntu:Pro:22.04:LTS: opensc</p> <p>A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small, permanently connected tokens to computers. Additionally, the token can internally track login status. This flaw allows an attacker to gain unauthorized access, carry out malicious actions, or compromise the system without the user&#39;s awareness.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: opensc, Ubuntu:Pro:22.04:LTS: opensc</p> <p>A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small, permanently connected tokens to computers. Additionally, the token can internally track login status. This flaw allows an attacker to gain unauthorized access, carry out malicious actions, or compromise the system without the user&#39;s awareness.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-40660 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2500 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in OpenSC ausnutzen, um Sicherheitsmechanismen zu umgehen und einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in OpenSC ausnutzen, um Sicherheitsmechanismen zu umgehen und einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2500