PT-2011-1202 · Opensc · Opensc

Jan Lieskovsky · Published 2011-01-07 · Updated 2024-06-15 · CVE-2010-4523

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.11.13

Description The issue affects the opensc package in Gentoo Linux and is related to multiple stack-based buffer overflows in libopensc. These overflows can be triggered by a long serial-number field on a smart card, specifically in files such as card-acos5.c, card-atrust-acos.c, and card-starcos.c. This can allow physically proximate attackers to execute arbitrary code, potentially leading to a breach of confidentiality, integrity, and availability of protected information. The exploitation can be carried out locally.

Recommendations For OpenSC versions prior to 0.11.13, update to version 0.11.13 or later to resolve the issue. As a temporary workaround, consider restricting access to smart cards or disabling the use of the libopensc library until a patch is applied. Avoid using long serial-number fields on smart cards in the affected API endpoints until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-09695

CVE-2010-4523

OPENSUSE-SU-2024:10269-1

Affected Products

Opensc

References · 28

• 🔥 http://openwall.com/lists/oss-security/2010/12/22/3 · Exploit
• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607427 · Exploit
• 🔥 http://labs.mwrinfosecurity.com/files/Advisories/mwri_opensc-get-serial-buffer-overflow_2010-12-13.pdf · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=664831 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2010/12/21/2 · Exploit
• http://vupen.com/english/advisories/2011/0009 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4523 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4523 · Vendor Advisory
• http://secunia.com/advisories/42807 · Vendor Advisory
• http://secunia.com/advisories/42658 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-4523 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10269-1 · Vendor Advisory
• https://opensc-project.org/opensc/changeset/4913 · Patch
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09695 · Security Note