src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 3.9 | 3.6 |
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-312,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| fedoraproject | fedora | 10 |
| fedoraproject | fedora | 11 |
| opensc-project | opensc | 0.11.7 |
| fedoraproject | fedora | 9 |
Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-119,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| opensc-project | opensc | 0.10.1 |
| opensc-project | opensc | * |
| opensc-project | opensc | 0.9.2 |
| opensc-project | opensc | 0.8 |
| opensc-project | opensc | 0.11.11 |
| opensc-project | opensc | 0.9 |
| opensc-project | opensc | 0.9.8 |
| opensc-project | opensc | 0.10.0 |
| opensc-project | opensc | 0.9.5 |
| opensc-project | opensc | 0.11.4 |
| opensc-project | opensc | 0.9.6 |
| opensc-project | opensc | 0.8.0 |
| opensc-project | opensc | 0.9.7 |
| opensc-project | opensc | 0.11.8 |
| opensc-project | opensc | 0.3.5 |
| opensc-project | opensc | 0.6.1 |
| opensc-project | opensc | 0.11.6 |
| opensc-project | opensc | 0.11.5 |
| opensc-project | opensc | 0.6.0 |
| opensc-project | opensc | 0.11.12 |
| opensc-project | opensc | 0.11.10 |
| opensc-project | opensc | 0.11.7 |
| opensc-project | opensc | 0.11.0 |
| opensc-project | opensc | 0.11.3 |
| opensc-project | opensc | 0.3.2 |
| opensc-project | opensc | 0.5.0 |
| opensc-project | opensc | 0.9.4 |
| opensc-project | opensc | 0.7.0 |
| opensc-project | opensc | 0.11.2 |
| opensc-project | opensc | 0.8.0.0 |
| opensc-project | opensc | 0.4.0 |
| opensc-project | opensc | 0.8.1 |
| opensc-project | opensc | 0.9.3 |
| opensc-project | opensc | 0.11.1 |
| opensc-project | opensc | 0.11.9 |