TI-2023-21453 CVE-2023-40660 · GHSA-7635-x5f9-5458
Opensc: potential pin bypass when card tracks its own login state
Priority LOW 33
A flaw was found in OpenSC packages that allow a potential PIN bypass.
RHSA-2023:7876
opensc security update
Released 2023-12-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) opensc-0.20.0-7.el8_9
Fixes 2 records
TI-2023-21454 CVE-2023-40661 · GHSA-2c2j-2pgv-gfgc
Opensc: multiple memory issues with pkcs15-init (enrollment tool)
Priority LOW 31
Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards.