Vulnerabilities

TI-2010-04253 CVE-2010-4523 · GHSA-8q7x-x6wm-6x5q

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow…

LOW 33

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c,…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00869 Published 2011-01-07 No fix listed CWE-119

TI-2009-01519 CVE-2009-1603 · GHSA-8772-675x-8fvx

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified…

LOW 36

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of me…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01396 Published 2009-05-11 No fix listed CWE-312

TI-2009-00348 CVE-2009-0368 · GHSA-q2pp-hq8h-7mm3

OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN…

LOW 14

OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.01193 Published 2009-03-02 No fix listed CWE-310

TI-2008-03811 CVE-2008-3972 · GHSA-445p-3crg-24jx

pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card…

LOW 29

pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate attackers to exploit vulnerabilities that th…

CVSS 2.0MEDIUM 6.6 Local No auth Interaction — EPSS 0.00369 Published 2008-09-10 No fix listed CWE-264

TI-2008-02146 CVE-2008-2235 · GHSA-8cph-r8x9-fxx9

OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the…

LOW 23

OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to chan…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00406 Published 2008-08-01 No fix listed CWE-310