The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7346-1 advisory.

    It was discovered that OpenSC did not correctly handle certain memory operations, which could lead to a     use-after-free vulnerability. An attacker could possibly use this issue to cause a denial of service or     execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2021-42780)

    It was discovered that OpenSC did not correctly handle certain memory operations, which could lead to a     stack buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-42782)

    It was discovered that OpenSC did not correctly handle the length of certain buffers, which could lead to     a out-of-bounds access vulnerability. An attacker could possibly use this issue to cause a denial of     service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu     20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-2977)

    Deepanjan Pal discovered that OpenSC did not correctly authenticate a zero length PIN. A physically     proximate attacker could possibly use this issue to gain unauthorized access to certain systems. This     issue only affected

    Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-40660)

    It was discovered that OpenSC did not correctly handle certain memory operations. A physically proximate     attacker could possibly use this issue to compromise key generation, certificate loading and other card     management operations. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-40661)

    Hubert Kario, Michal Shagam and Eyal Ronen discovered that OpenSC had a timing side-channel and     incorrectly handled RSA padding. An attacker could possibly use this issue to recover sensitive     information. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-5992)

    Matteo Marini discovered that OpenSC did not properly manage memory due to certain uninitialized     variables. A physically proximate attacker could possibly use this issue to gain unauthorized access to     certain systems. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu     24.10. (CVE-2024-45615)

    Matteo Marini discovered that OpenSC did not correctly handle certain memory operations. A physically     proximate attacker could possibly use this issue to gain unauthorized access to certain systems. This     issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10.
    (CVE-2024-45616, CVE-2024-45617)

    Matteo Marini discovered that OpenSC did not correctly handle certain memory operations. A physically     proximate attacker could possibly use this issue to gain unauthorized access to certain systems.
    (CVE-2024-45618, CVE-2024-45620)

    Matteo Marini discovered that OpenSC did not correctly handle certain memory operations. A physically     proximate attacker could possibly use this issue to gain unauthorized access to certain systems. This     issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2024-45619)

    It was discovered that OpenSC did not correctly handle certain memory operations, which could lead to a     buffer overflow. A physically proximate attacker could possibly use this issue to compromise card     management operations during enrollment and modification. This issue only affected Ubuntu 20.04 LTS,     Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2024-8443)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has opensc packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated     by one process, it can perform cryptographic operations in other processes when an empty zero-length pin     is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small,     permanently connected tokens to computers. Additionally, the token can internally track login status. This     flaw allows an attacker to gain unauthorized access, carry out malicious actions, or compromise the system     without the user's awareness. (CVE-2023-40660)

  - A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15     cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context.
    The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is     wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In     cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is     possible. (CVE-2023-2977)

  - Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card     enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of     these flaws, an attacker must have physical access to the computer system and employ a custom-crafted USB     device or smart card to manipulate responses to APDUs. This manipulation can potentially allow compromise     key generation, certificate loading, and other card management operations during enrollment.
    (CVE-2023-40661)

  - An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling     symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the     computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate     APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's     security. (CVE-2023-4535)

  - A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-     channel resistant. This issue may result in the potential leak of private data. (CVE-2023-5992)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2023: 7160 公告中提及的一個弱點影響。

  - 在 OpenSC 中發現一個弱點。此安全性瑕疵會造成 pkcs15 cardos_have_verifyrc_package 中發生緩衝區溢位。攻擊者可提供含有格式錯誤的 ASN1 內容的智慧卡套件。
    cardos_have_verifyrc_package 函式會掃描 ASN1 緩衝區中的 2 個標籤，其中的剩余長度會因起始指標移動而被錯誤計算。這可能會導致堆積型緩衝區過度讀取。如果在編譯時啟用了 ASAN，則系統會因此而發生當機。也可能進一步造成資訊洩漏或更多損害。(CVE-2023-2977)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

因此，它受到 ALAS2023-2023-207 公告中提及的一個弱點影響。

  - 在 OpenSC 中發現一個弱點。此安全性瑕疵會造成 pkcs15 cardos_have_verifyrc_package 中發生緩衝區溢位。攻擊者可提供含有格式錯誤的 ASN1 內容的智慧卡套件。
    cardos_have_verifyrc_package 函式會掃描 ASN1 緩衝區中的 2 個標籤，其中的剩余長度會因起始指標移動而被錯誤計算。這可能會導致堆積型緩衝區過度讀取。如果在編譯時啟用了 ASAN，則系統會因此而發生當機。也可能進一步造成資訊洩漏或更多損害。(CVE-2023-2977)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 主機上安裝的多個套件受到 USN-7346-1 公告中提及的多個弱點影響。

    據發現，OpenSC 未正確處理某些記憶體作業，這可導致釋放後使用弱點。攻擊者可能會利用此問題造成拒絕服務或執行任意程式碼。此問題只影響 Ubuntu 16.04 LTS、Ubuntu 18.04 LTS 和 Ubuntu 20.04 LTS。
    (CVE-2021-42780)

    據發現，OpenSC 未正確處理某些記憶體作業，這可導致堆疊緩衝區溢位弱點。攻擊者可能會利用此問題造成拒絕服務或執行任意程式碼。這個問題只會影響 Ubuntu 20.04 LTS。(CVE-2021-42782)

    據發現，OpenSC 未正確處理某些緩衝區的長度，這可導致超出邊界存取弱點。攻擊者可能會利用此問題造成拒絕服務或執行任意程式碼。此問題只影響 Ubuntu 16.04 LTS、Ubuntu 18.04 LTS、Ubuntu 20.04 LTS 和 Ubuntu 22.04 LTS。(CVE-2023-2977)

    Deepanjan Pal 發現 OpenSC 未正確驗證零長度 PIN。實際位置靠近的攻擊者可能會利用此問題，取得未經授權存取特定系統的權限。此問題只會影響

     Ubuntu 20.04 LTS 和 Ubuntu 22.04 LTS。(CVE-2023-40660)

    據發現，OpenSC 未正確處理某些記憶體作業。實際位置靠近的攻擊者可能會利用此問題，入侵金鑰產生、憑證載入和其他卡片管理作業。此問題僅影響 Ubuntu 20.04 LTS 和 Ubuntu 22.04 LTS。(CVE-2023-40661)

    Hubert Kario、Michal Shagam 和 Eyal Ronen 發現，OpenSC 有計時側通道，並且未正確處理 RSA 填補。攻擊者可能利用此問題復原敏感資訊。這個問題只會影響 Ubuntu 22.04 LTS。(CVE-2023-5992)

    Matteo Marini 發現，OpenSC 未正確管理記憶體，這是某些未初始化的變數所致。實際位置靠近的攻擊者可能會利用此問題，取得未經授權存取特定系統的權限。此問題僅影響了 Ubuntu 20.04 LTS、Ubuntu 22.04 LTS、Ubuntu 24.04 LTS 和 Ubuntu 24.10。(CVE-2024-45615)

    Matteo Marini 發現，OpenSC 未正確處理某些記憶體作業。實際位置靠近的攻擊者可能會利用此問題，取得未經授權存取特定系統的權限。受此問題影響的只有 Ubuntu 20.04 LTS、Ubuntu 22.04 LTS、Ubuntu 24.04 LTS 和 Ubuntu 24.10。
    (CVE-2024-45616、CVE-2024-45617)

    Matteo Marini 發現，OpenSC 未正確處理某些記憶體作業。實際位置靠近的攻擊者可能會利用此問題，取得未經授權存取特定系統的權限。
    (CVE-2024-45618、CVE-2024-45620)

    Matteo Marini 發現，OpenSC 未正確處理某些記憶體作業。實際位置靠近的攻擊者可能會利用此問題，取得未經授權存取特定系統的權限。此問題僅影響了 Ubuntu 22.04 LTS、Ubuntu 24.04 LTS 和 Ubuntu 24.10。(CVE-2024-45619)

    據發現，OpenSC 未正確處理某些記憶體作業，這可導致緩衝區溢位弱點。實際位置靠近的攻擊者可能會利用此問題，在註冊和修改過程中入侵卡片管理作業。此問題僅影響了 Ubuntu 20.04 LTS、Ubuntu 22.04 LTS、Ubuntu 24.04 LTS 和 Ubuntu 24.10。(CVE-2024-8443)

Tenable 已直接從 Ubuntu 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0001 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-2977:
    A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15     cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context.
    The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is     wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In     cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is     possible.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2516-1 advisory.

  - A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15     cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context.
    The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is     wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In     cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is     possible. (CVE-2023-2977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of opensc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2977 advisory.

  - A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15     cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context.
    The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is     wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In     cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is     possible. (CVE-2023-2977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of opensc installed on the remote host is prior to 0.19.0-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2102 advisory.

    A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. (CVE-2021-42779)

    A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could     potentially crash programs using the library. (CVE-2021-42780)

    Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could     potentially crash programs using the library. (CVE-2021-42781)

    Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could     potentially crash programs using the library. (CVE-2021-42782)

    A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15     cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context.
    The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is     wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In     cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is     possible. (CVE-2023-2977)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0030 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2021-34193:
    Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs.

    CVE-2023-2977:
    A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15     cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context.
    The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is     wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In     cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is     possible.

    CVE-2023-40660:
    A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated     by one process, it can perform cryptographic operations in other processes when an empty zero-length pin     is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small,     permanently connected tokens to computers. Additionally, the token can internally track login status. This     flaw allows an attacker to gain unauthorized access, carry out malicious actions, or compromise the system     without the user's awareness.

    CVE-2023-4535:
    An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling     symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the     computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate     APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's     security.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4004 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4004-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     December 28, 2024                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : opensc     Version        : 0.21.0-1+deb11u1     CVE ID         : CVE-2021-34193 CVE-2021-42778 CVE-2021-42779 CVE-2021-42780                      CVE-2021-42781 CVE-2021-42782 CVE-2023-2977 CVE-2023-5992                      CVE-2023-40660 CVE-2023-40661 CVE-2024-1454 CVE-2024-8443                      CVE-2024-45615 CVE-2024-45616 CVE-2024-45617 CVE-2024-45618                      CVE-2024-45619 CVE-2024-45620     Debian Bug     : 1037021 1055521 1055522 1064189 1082853 1082859 1082860                      1082861 1082862 1082863 1082864

    Multiple vulnerabilities were found in opensc, a set of libraries and     utilities to access smart cards, which could lead to application crash,     information leak, or PIN bypass.

    CVE-2021-34193

        Multiple stack overflow vulnerabilities were discovered in OpenSC         smart card middleware via crafted responses to APDUs.

    CVE-2021-42778

        A heap double free issue was found in sc_pkcs15_free_tokeninfo().

    CVE-2021-42779

        A heap use after free issue was found in sc_file_valid().

    CVE-2021-42780

        A use after return issue was found in the insert_pin() function,         which could potentially crash programs using the library.

    CVE-2021-42781

        Multiple heap buffer overflow issues were found in         pkcs15-oberthur.c, which could potentially crash programs using the         library.

    CVE-2021-42782

        Multiple buffer overflow issues were found in various places, which         could potentially crash programs using the library.

    CVE-2023-2977

        A buffer overrun vulnerability was found in pkcs15's         cardos_have_verifyrc_package().  When supplying a smart card package         with malformed ASN.1 context, an attacker can trigger a crash or         information leak via heap-based buffer out-of-bound read.

    CVE-2023-5992

         Alicja Karion discovered that the code handling the PKCS#1.5          encryption padding removal was not implemented in side-channel          resistant way, which can lead to decryption of previously captured          RSA ciphertexts and forging of signatures based on the timing data          (Marvin attack).

    CVE-2023-40660

        Deepanjan Pal discovered a potential PIN bypass with empty PIN.
        When the token/card was plugged into the computer and authenticated         from one process, it could be used to provide cryptographic         operations from different process when the empty, zero-length PIN         was provided.

    CVE-2023-40661

        Multiple memory vulnerabilities were found by dynamic analyzers in         pkcs15-init.

    CVE-2024-1454

        A memory use after free issue was found in AuthentIC driver when         updating token info.

    CVE-2024-8443

        An heap buffer overflow issue was found in OpenPGP driver during key         generation.

    CVE-2024-45615

        Matteo Marini discovered multiple uses of uninitialized values in         libopensc and pkcs15init.

    CVE-2024-45616

        Matteo Marini discovered multiple uses of uninitialized values after         incorrect check or usage of APDU response values in libopensc.

    CVE-2024-45617

        Matteo Marini discovered multiple uses of uninitialized values after         incorrect or missing checking return values of functions in         libopensc.

    CVE-2024-45618

        Matteo Marini discovered multiple uses of uninitialized values after         incorrect or missing checking return values of functions in         pkcs15init.

    CVE-2024-45619

        Matteo Marini discovered multiple incorrect handling of length of         buffers or files in libopensc, which could result in application         crash or information leak.  When buffers are partially filled with         data, uninitialized parts of the buffer may be incorrectly accessed.

    CVE-2024-45620

        Matteo Marini discovered multiple incorrect handling of length of         buffers or files in pkcs15init, which could result in application         crash or information leak.  When buffers are partially filled with         data, uninitialized parts of the buffer may be incorrectly accessed.

    For Debian 11 bullseye, these problems have been fixed in version     0.21.0-1+deb11u1.

    We recommend that you upgrade your opensc packages.

    For the detailed security status of opensc please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/opensc

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
232648	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : OpenSC vulnerabilities (USN-7346-1)	Nessus	Ubuntu Local Security Checks	2025/3/12	2025/9/3	high
242724	NewStart CGSL MAIN 7.02 : opensc Multiple Vulnerabilities (NS-SA-2025-0119)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	high
185681	RHEL 8：opensc (RHSA-2023: 7160)	Nessus	Red Hat Local Security Checks	2023/11/14	2024/11/7	high
177195	Amazon Linux 2023：opensc (ALAS2023-2023-207)	Nessus	Amazon Linux Local Security Checks	2023/6/13	2024/12/11	high
232648	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : OpenSC 弱點 (USN-7346-1)	Nessus	Ubuntu Local Security Checks	2025/3/12	2025/9/3	high
236371	Alibaba Cloud Linux 3 : 0001: opensc (ALINUX3-SA-2024:0001)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
177379	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : opensc (SUSE-SU-2023:2516-1)	Nessus	SuSE Local Security Checks	2023/6/16	2023/7/14	high
177754	CBL Mariner 2.0 Security Update: opensc (CVE-2023-2977)	Nessus	MarinerOS Local Security Checks	2023/6/29	2025/2/10	high
177849	Amazon Linux 2 : opensc (ALAS-2023-2102)	Nessus	Amazon Linux Local Security Checks	2023/7/1	2024/12/11	high
239185	TencentOS Server 4: opensc (TSSA-2024:0030)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
213413	Debian dla-4004 : opensc - security update	Nessus	Debian Local Security Checks	2024/12/28	2024/12/28	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high