Logo
›
›vulnerability›CVE-2023-40661
Name
CVE-2023-40661
Source
NVD ( link)Debian ( link)
Description
Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and employ a custom-crafted USB device or smart card to manipulate responses to APDUs. This manipulation can potentially allow compromise key generation, certificate loading, and other card management operations during enrollment.
CWEs
CWE-119 CWE-119
Published Date
Updated Date
Workaround
-
Advisories
https://access.redhat.com/security/cve/CVE-2023-40661Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2240913Issue Tracking
https://github.com/OpenSC/OpenSC/issues/2792#issuecomment-1674806651VDB Entry
https://github.com/OpenSC/OpenSC/releases/tag/0.24.0-rc1Release Notes
https://github.com/OpenSC/OpenSC/wiki/OpenSC-security-advisoriesVendor Advisory
https://access.redhat.com/security/cve/CVE-2023-40661Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2240913Issue Tracking
https://github.com/OpenSC/OpenSC/issues/2792#issuecomment-1674806651VDB Entry
https://github.com/OpenSC/OpenSC/releases/tag/0.24.0-rc1Release Notes
https://github.com/OpenSC/OpenSC/wiki/OpenSC-security-advisoriesVendor Advisory

Analysis#

Affected Component
Analysis
opensc
Patched

Vulnerability Ratings#

5.4
CVSSv31
6.4
CVSSv31

Others affected components#

Name
Project
Project Version
Version
Status
opensc
buildroot
2025.02.x
0.27.1
Not Affected
opensc
buildroot
master
0.27.1
Not Affected
opensc
openwrt
master
0.27.1-r1
Not Affected
opensc
openwrt
openwrt-25.12
0.26.1-r1
Not Affected
opensc
yocto
master
0.27.1
Not Affected
opensc
yocto
scarthgap
0.25.1
Not Affected

Resolved with patches#

opensc (yocto:kirkstone)

#
Title
Author
Resolve
1
sc_pkcs15init_rmdir: prevent out of bounds write
Frank Morgner <frankmorgner@gmail.com>
CVE-2023-40661
2
Check array bounds
Veronika Hanulikova <xhanulik@fi.muni.cz>
CVE-2023-40661
3
pkcs15: Avoid buffer overflow when getting last update
Jakub Jelen <jjelen@redhat.com>
CVE-2023-40661
4
setcos: Avoid buffer underflow
Jakub Jelen <jjelen@redhat.com>
CVE-2023-40661
5
Check length of string before making copy
Veronika Hanulikova <xhanulik@fi.muni.cz>
CVE-2023-40661
6
oberthur: Avoid buffer overflow
Jakub Jelen <jjelen@redhat.com>
CVE-2023-40661
7
pkcs15-cflex: check path length to prevent underflow
=?UTF-8?q?Veronika=20Hanul=C3=ADkov=C3=A1?= <vhanulik@redhat.com>
CVE-2023-40661