PT-2024-9400 · Opensc+6 · Opensc+6

Matteo Marini · Published 2024-09-03 · Updated 2025-10-14 · CVE-2024-45617

Positive Technologies (AI Summary)

CVSS v3.1

3.9

Low

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions: OpenSC (affected versions not specified)

Description: A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to unexpected work with variables that have not been initialized. This could potentially impact the confidentiality, integrity, and availability of protected information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

CWE-457

Related Identifiers

ALT-PU-2025-12697

ALT-PU-2025-12701

AZL-48732

AZL-48823

BDU:2024-11092

CVE-2024-45617

DLA-4004-1

MGASA-2025-0096

OESA-2024-2245

OPENSUSE-SU-2024:14382-1

OPENSUSE-SU-2024_3444-1

OPENSUSE-SU-2024_3445-1

SUSE-SU-2024:3443-1

SUSE-SU-2024:3444-1

SUSE-SU-2024:3445-1

SUSE-SU-2024:3517-1

SUSE-SU-2025:20072-1

SUSE-SU-2025:20671-1

USN-7346-1

USN-7346-2

USN-7346-3

Affected Products

Alt Linux

Astra Linux

Linuxmint

Opensc

Red Os

Suse

Ubuntu

References · 89

• 🔥 https://github.com/OpenSC/Wiki/blob/master/CVE-2024-45617.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-45620 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:3517-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45618 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7346-3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45618 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20671-1 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2024-45617 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-5992 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-45617 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45617 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14382-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7346-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8443 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-45617 · Security Note