CVE-2024-45618Low· 3.9▾ SunlitA vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 21.5 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.3%
A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs.
Insufficient or missing checking of return values of functions leads to unexpected work with variables that have not been initialized.
enterprise_linux = 7.0enterprise_linux = 8.0enterprise_linux = 9.0opensc < 0.26.0Upgrade past the affected range:
opensc 0.26.0Connected by shared product, vendor, weakness, or advisory.
CVE-2024-45617Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
CVE-2024-45616Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
CVE-2024-45615Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
CVE-2024-8443Low· 2.9A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver
CVE-2024-45620Low· 3.9A vulnerability was found in the pkcs15-init tool in OpenSC
CVE-2024-45619Medium· 4.3A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK