CVE-2023-2977

2023-06-0100:00:00

CWE-119

redhat

www.cve.org

opensc

buffer overrun

pkcs15

smart card package

asn1 context

heap-based buffer

asan

info leak

AI Score

7.1

Confidence

High

EPSS

Percentile

14.8%

JSON

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is possible.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "OpenSC",
    "versions": [
      {
        "version": "opensc-0.23.0",
        "status": "affected"
      }
    ]
  }
]