https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:10:45 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:7879 <p><strong>Affected:</strong> AlmaLinux:9: opensc</p> <p>The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures.</p> <p>Security Fix(es):</p> <p>* OpenSC: Potential PIN bypass when card tracks its own login state (CVE-2023-40660) * OpenSC: multiple memory issues with pkcs15-init (enrollment tool) (CVE-2023-40661) * OpenSC: out-of-bounds read in MyEID driver handling encryption using symmetric keys (CVE-2023-4535)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: opensc</p> <p>The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures.</p> <p>Security Fix(es):</p> <p>* OpenSC: Potential PIN bypass when card tracks its own login state (CVE-2023-40660) * OpenSC: multiple memory issues with pkcs15-init (enrollment tool) (CVE-2023-40661) * OpenSC: out-of-bounds read in MyEID driver handling encryption using symmetric keys (CVE-2023-4535)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:7879 https://cve.radiocsirt.org/vuln/bdu:2024-02587 bdu:2024-02587 https://cve.radiocsirt.org/vuln/bdu:2024-02587 https://cve.radiocsirt.org/vuln/euvd-2026-261618 EUVD-2026-261618 https://cve.radiocsirt.org/vuln/euvd-2026-261618 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4535 <p>An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system&#39;s security.</p> <p>An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system&#39;s security.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4535 https://cve.radiocsirt.org/vuln/ghsa-phh2-j3h6-vqr9 <p>An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system&#39;s security.</p> <p>An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system&#39;s security.</p> https://cve.radiocsirt.org/vuln/ghsa-phh2-j3h6-vqr9 https://cve.radiocsirt.org/vuln/gsd-2023-4535 gsd-2023-4535 https://cve.radiocsirt.org/vuln/gsd-2023-4535 https://cve.radiocsirt.org/vuln/msrc_cve-2023-4535 msrc_CVE-2023-4535 https://cve.radiocsirt.org/vuln/msrc_cve-2023-4535 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13314-1 <p>opensc-0.23.0-3.1 on GA media</p> <p>opensc-0.23.0-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13314-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4535 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: opensc, Ubuntu:Pro:18.04:LTS: opensc, Ubuntu:20.04:LTS: opensc, Ubuntu:22.04:LTS: opensc, Ubuntu:24.10: opensc, Ubuntu:24.04:LTS: opensc</p> <p>An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system&#39;s security.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: opensc, Ubuntu:Pro:18.04:LTS: opensc, Ubuntu:20.04:LTS: opensc, Ubuntu:22.04:LTS: opensc, Ubuntu:24.10: opensc, Ubuntu:24.04:LTS: opensc</p> <p>An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system&#39;s security.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4535 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2500 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in OpenSC ausnutzen, um Sicherheitsmechanismen zu umgehen und einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in OpenSC ausnutzen, um Sicherheitsmechanismen zu umgehen und einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2500