OpenSC: Schwachstelle ermöglicht Manipulation von Dateien

Summary

Product

Vulnerabilities 1

• Low 3.4
  CVE-2024-1454

  Opensc: memory use after free in authentic driver when updating token info

  The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards. An attacker must have physical access to the computer system…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Azure Linux Alpine
  Feb 12, 2024

Revision history

1. 2024-12-29 #3

   Neue Updates von Debian aufgenommen

2. 2024-03-07 #2

   Neue Updates von Fedora aufgenommen

3. 2024-02-12 #1

   Initiale Fassung

References

• Red Hat Bugtracker vom 2024-02-12
  https://bugzilla.redhat.com/show_bug.cgi?id=2263929
• GitHub Advisory Database vom 2024-02-12
  https://github.com/advisories/GHSA-6q4q-mhg5-v6xh
• Fedora Security Advisory FEDORA-2024-3DBC3E8105 vom 2024-03-07
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-3dbc3e8105
• Fedora Security Advisory FEDORA-2024-6460A03E29 vom 2024-03-07
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-6460a03e29
• Debian Security Advisory DLA-4004 vom 2024-12-28
  https://lists.debian.org/debian-lts-announce/2024/12/msg00026.html