リモートの SUSE Linux SLES15ホストにインストールされているパッケージは、SUSE- SU-2023: 2508-1 アドバイザリに記載されている脆弱性の影響を受けます。

  - OpenSC に脆弱性が見つかりました。このセキュリティの欠陥により、pkcs15 cardos_have_verifyrc_package でバッファオーバーランの脆弱性が発生します。攻撃者は、無効な形式の ASN1 コンテキストのあるスマートカードパッケージを提供する可能性があります。
    cardos_have_verifyrc_package 関数は、ASN1 バッファで 2 つのタグをスキャンします。この場合、開始ポインターの移動により、残りの長さが不適切に計算されます。これにより、ヒープベースのバッファ OOB 読み取りが発生する可能性があります。コンパイル中に ASAN が有効な場合、これによりクラッシュが発生します。さらなる情報漏洩や被害が発生する可能性があります。(CVE-2023-2977)

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6587 advisory.

    The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on     cards that support cryptographic operations and enables their use for authentication, mail encryption, or     digital signatures.

    Security Fix(es):

    * opensc: buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package (CVE-2023-2977)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3463 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3463-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     June 21, 2023                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : opensc     Version        : 0.19.0-1+deb10u2     CVE ID         : CVE-2019-6502 CVE-2021-42779 CVE-2021-42780 CVE-2021-42781                      CVE-2021-42782 CVE-2023-2977     Debian Bug     : 1037021

    Multiple vulnerabilities were found in opensc, a set of libraries and     utilities to access smart cards, which could lead to application crash     or information leak.

    CVE-2019-6502

        Dhiraj Mishra discovered a minor memory leak in the eidenv(1) CLI         utility on an error-case.

    CVE-2021-42779

        A heap use after free vulnerability was discovered in         sc_file_valid().

    CVE-2021-42780

        An use after return vulnerability was discovered in insert_pin(),         which could potentially crash programs using the library.

    CVE-2021-42781

        Multiple heap buffer overflow vulnerabilities were discovered in         pkcs15-oberthur.c, which could potentially crash programs using the         library.

    CVE-2021-42782

        Multiple stack buffer overflow vulnerabilities were discovered in         various places, which could potentially crash programs using the         library.

    CVE-2023-2977

        A buffer overrun vulnerability was discovered in pkcs15         cardos_have_verifyrc_package(), which could lead to crash or         information leak via smart card package with a malicious ASN1         context.

    For Debian 10 buster, these problems have been fixed in version     0.19.0-1+deb10u2.

    We recommend that you upgrade your opensc packages.

    For the detailed security status of opensc please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/opensc

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-2afb831742 advisory.

    Fix buffer overrun vulnerability (#2211088), fixes CVE-2023-2977

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the opensc-0.23.0-2.el9 build changelog.

  - buffer overrun in pkcs15init for cardos (CVE-2023-2977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-207 advisory.

    A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15     cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context.
    The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is     wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In     cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is     possible. (CVE-2023-2977)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2466-1 advisory.

  - A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15     cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context.
    The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is     wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In     cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is     possible. (CVE-2023-2977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:7160 advisory.

    The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on     cards that support cryptographic operations and enables their use for authentication, mail encryption, or     digital signatures.

    Security Fix(es):

    * opensc: buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package (CVE-2023-2977)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7346-1 advisory.

    It was discovered that OpenSC did not correctly handle certain memory operations, which could lead to a     use-after-free vulnerability. An attacker could possibly use this issue to cause a denial of service or     execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2021-42780)

    It was discovered that OpenSC did not correctly handle certain memory operations, which could lead to a     stack buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-42782)

    It was discovered that OpenSC did not correctly handle the length of certain buffers, which could lead to     a out-of-bounds access vulnerability. An attacker could possibly use this issue to cause a denial of     service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu     20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-2977)

    Deepanjan Pal discovered that OpenSC did not correctly authenticate a zero length PIN. A physically     proximate attacker could possibly use this issue to gain unauthorized access to certain systems. This     issue only affected

    Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-40660)

    It was discovered that OpenSC did not correctly handle certain memory operations. A physically proximate     attacker could possibly use this issue to compromise key generation, certificate loading and other card     management operations. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-40661)

    Hubert Kario, Michal Shagam and Eyal Ronen discovered that OpenSC had a timing side-channel and     incorrectly handled RSA padding. An attacker could possibly use this issue to recover sensitive     information. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-5992)

    Matteo Marini discovered that OpenSC did not properly manage memory due to certain uninitialized     variables. A physically proximate attacker could possibly use this issue to gain unauthorized access to     certain systems. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu     24.10. (CVE-2024-45615)

    Matteo Marini discovered that OpenSC did not correctly handle certain memory operations. A physically     proximate attacker could possibly use this issue to gain unauthorized access to certain systems. This     issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10.
    (CVE-2024-45616, CVE-2024-45617)

    Matteo Marini discovered that OpenSC did not correctly handle certain memory operations. A physically     proximate attacker could possibly use this issue to gain unauthorized access to certain systems.
    (CVE-2024-45618, CVE-2024-45620)

    Matteo Marini discovered that OpenSC did not correctly handle certain memory operations. A physically     proximate attacker could possibly use this issue to gain unauthorized access to certain systems. This     issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2024-45619)

    It was discovered that OpenSC did not correctly handle certain memory operations, which could lead to a     buffer overflow. A physically proximate attacker could possibly use this issue to compromise card     management operations during enrollment and modification. This issue only affected Ubuntu 20.04 LTS,     Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2024-8443)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has opensc packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated     by one process, it can perform cryptographic operations in other processes when an empty zero-length pin     is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small,     permanently connected tokens to computers. Additionally, the token can internally track login status. This     flaw allows an attacker to gain unauthorized access, carry out malicious actions, or compromise the system     without the user's awareness. (CVE-2023-40660)

  - A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15     cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context.
    The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is     wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In     cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is     possible. (CVE-2023-2977)

  - Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card     enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of     these flaws, an attacker must have physical access to the computer system and employ a custom-crafted USB     device or smart card to manipulate responses to APDUs. This manipulation can potentially allow compromise     key generation, certificate loading, and other card management operations during enrollment.
    (CVE-2023-40661)

  - An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling     symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the     computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate     APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's     security. (CVE-2023-4535)

  - A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-     channel resistant. This issue may result in the potential leak of private data. (CVE-2023-5992)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
177340	SUSE SLES15 セキュリティ更新プログラム: opensc (SUSE-SU-2023:2508-1)	Nessus	SuSE Local Security Checks	2023/6/15	2023/7/12	high
185149	RHEL 9 : opensc (RHSA-2023:6587)	Nessus	Red Hat Local Security Checks	2023/11/7	2024/11/7	high
177462	Debian dla-3463 : opensc - security update	Nessus	Debian Local Security Checks	2023/6/21	2025/1/22	high
179910	Fedora 37 : opensc (2023-2afb831742)	Nessus	Fedora Local Security Checks	2023/8/17	2024/11/14	high
191397	CentOS 9 : opensc-0.23.0-2.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	high
177195	Amazon Linux 2023 : opensc (ALAS2023-2023-207)	Nessus	Amazon Linux Local Security Checks	2023/6/13	2024/12/11	high
177052	SUSE SLES12 Security Update : opensc (SUSE-SU-2023:2466-1)	Nessus	SuSE Local Security Checks	2023/6/9	2023/7/14	high
185681	RHEL 8 : opensc (RHSA-2023:7160)	Nessus	Red Hat Local Security Checks	2023/11/14	2024/11/7	high
232648	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : OpenSC vulnerabilities (USN-7346-1)	Nessus	Ubuntu Local Security Checks	2025/3/12	2025/3/12	high
242724	NewStart CGSL MAIN 7.02 : opensc Multiple Vulnerabilities (NS-SA-2025-0119)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high