A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the `pkcs15-init` tool may lead to out-of-bound rights, possibly resulting in arbitrary code execution.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-775 advisory.

    It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is     handled and partially filled buffers can be accessed incorrectly when a specially crafted response to     APDUs in a USB device or a smart card. (CVE-2024-45615)

    It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is     handled and partially filled buffers can be accessed incorrectly when a specially crafted response to     APDUs in a USB device or a smart card. (CVE-2024-45616)

    It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is     handled and partially filled buffers can be accessed incorrectly when a specially crafted response to     APDUs in a USB device or a smart card. (CVE-2024-45617)

    It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is     handled and partially filled buffers can be accessed incorrectly when a specially crafted response to     APDUs in a USB device or a smart card. (CVE-2024-45618)

    It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is     handled and partially filled buffers can be accessed incorrectly when a specially crafted response to     APDUs in a USB device or a smart card. (CVE-2024-45619)

    It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is     handled and partially filled buffers can be accessed incorrectly when a specially crafted response to     APDUs in a USB device or a smart card. (CVE-2024-45620)

    libopensc: Heap buffer overflow in OpenPGP driver when generating key (CVE-2024-8443)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3444-1 advisory.

    - CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init. (bsc#1230076)
    - CVE-2024-45619: Incorrect handling length of buffers or files in libopensc. (bsc#1230075)
    - CVE-2024-45618: Uninitialized values after incorrect or missing checking return values of functions in     pkcs15init. (bsc#1230074)
    - CVE-2024-45617: Uninitialized values after incorrect or missing checking return values of functions in     libopensc. (bsc#1230073)
    - CVE-2024-45616: Uninitialized values after incorrect check or usage of APDU response values in     libopensc. (bsc#1230072)
    - CVE-2024-45615: Usage of uninitialized values in libopensc and pkcs15init. (bsc#1230071)
    - CVE-2024-8443: Heap buffer overflow in OpenPGP driver when generating key. (bsc#1230364)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3443-1 advisory.

    - CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init. (bsc#1230076)
    - CVE-2024-45619: Incorrect handling length of buffers or files in libopensc. (bsc#1230075)
    - CVE-2024-45618: Uninitialized values after incorrect or missing checking return values of functions in     pkcs15init. (bsc#1230074)
    - CVE-2024-45617: Uninitialized values after incorrect or missing checking return values of functions in     libopensc. (bsc#1230073)
    - CVE-2024-45616: Uninitialized values after incorrect check or usage of APDU response values in     libopensc. (bsc#1230072)
    - CVE-2024-45615: Usage of uninitialized values in libopensc and pkcs15init. (bsc#1230071)
    - CVE-2024-8443: Heap buffer overflow in OpenPGP driver when generating key. (bsc#1230364)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3445-1 advisory.

    - CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init. (bsc#1230076)
    - CVE-2024-45619: Incorrect handling length of buffers or files in libopensc. (bsc#1230075)
    - CVE-2024-45618: Uninitialized values after incorrect or missing checking return values of functions in     pkcs15init. (bsc#1230074)
    - CVE-2024-45617: Uninitialized values after incorrect or missing checking return values of functions in     libopensc. (bsc#1230073)
    - CVE-2024-45616: Uninitialized values after incorrect check or usage of APDU response values in     libopensc. (bsc#1230072)
    - CVE-2024-45615: Usage of uninitialized values in libopensc and pkcs15init. (bsc#1230071)
    - CVE-2024-8443: Heap buffer overflow in OpenPGP driver when generating key. (bsc#1230364)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
212360	Amazon Linux 2023 : opensc (ALAS2023-2024-775)	Nessus	Amazon Linux Local Security Checks	medium
207782	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : opensc (SUSE-SU-2024:3444-1)	Nessus	SuSE Local Security Checks	medium
207781	SUSE SLES12 Security Update : opensc (SUSE-SU-2024:3443-1)	Nessus	SuSE Local Security Checks	medium
207780	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : opensc (SUSE-SU-2024:3445-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2024-8443

low

Tenable Plugins

medium

medium

medium

medium