Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and employ a custom-crafted USB device or smart card to manipulate responses to APDUs. This manipulation can potentially allow compromise key generation, certificate loading, and other card management operations during enrollment.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade opensc | Dec 21, 2023 | Nov 6, 2023 |
| Alpine Linux | — | Upgrade opensc | Aug 22, 2024 | Nov 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade openscUpgrade opensc-debuginfo | Nov 3, 2023 | Nov 3, 2023 |
| Amazon_linux_2023 | — | Upgrade openscUpgrade opensc-debuginfoUpgrade opensc-debugsource | Feb 17, 2025 | Sep 25, 2023 |
| Centos_linux | — | Upgrade opensc-debugsourceUpgrade opensc-debuginfoUpgrade opensc | Dec 20, 2023 | Nov 6, 2023 |
| Debian | — | Upgrade opensc | Dec 4, 2023 | Nov 6, 2023 |
| Gentoo Linux | — | Upgrade dev-libs/opensc. | Dec 12, 2024 | Nov 6, 2023 |
| Oracle_linux | — | Upgrade opensc | Dec 19, 2023 | Sep 25, 2023 |
| Redhat_linux | — | Upgrade opensc-debuginfoUpgrade opensc-debugsourceUpgrade openscNo solution exists | Dec 20, 2023 | Nov 6, 2023 |
| Suse | — | Upgrade opensc-32bitUpgrade opensc | Oct 13, 2023 | Oct 12, 2023 |
| Ubuntu | — | Upgrade opensc (Ubuntu Pro)Upgrade opensc-pkcs11 (Ubuntu Pro) | Mar 13, 2025 | Nov 6, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub