This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============1405931798450511812==
Content-Language: en-US
Content-Type: multipart/signed; micalg=pgp-sha256;
protocol="application/pgp-signature";
boundary="------------0B8eqbSWDmmIJrqHlHVu5OuD"
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------0B8eqbSWDmmIJrqHlHVu5OuD
Content-Type: multipart/mixed;
boundary="------------USrtrblnvb7KpwVvbhKyuwCx";
protected-headers="v1"
From: Bruce Cable <bruce.cable@canonical.com>
Reply-To: Ubuntu Security <security@ubuntu.com>
To: ubuntu-security-announce@lists.ubuntu.com
Message-ID: <f93477a4-7b2c-4539-b527-22b012a15488@canonical.com>
Subject: [USN-7346-1] OpenSC vulnerabilities
--------------USrtrblnvb7KpwVvbhKyuwCx
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
==========================================================================
Ubuntu Security Notice USN-7346-1
March 12, 2025
opensc vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 24.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
Summary:
Several security issues were fixed in opensc.
Software Description:
- opensc: Smart card utilities with support for PKCS#15 compatible cards
Details:
It was discovered that OpenSC did not correctly handle certain memory
operations, which could lead to a use-after-free vulnerability. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-42780)
It was discovered that OpenSC did not correctly handle certain memory
operations, which could lead to a stack buffer overflow. An attacker
could possibly use this issue to cause a denial of service or execute
arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-42782)
It was discovered that OpenSC did not correctly handle the length of
certain buffers, which could lead to a out-of-bounds access vulnerability.
An attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-2977)
Deepanjan Pal discovered that OpenSC did not correctly authenticate a zero
length PIN. A physically proximate attacker could possibly use this issue
to gain unauthorized access to certain systems. This issue only affected
Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-40660)
It was discovered that OpenSC did not correctly handle certain memory
operations. A physically proximate attacker could possibly use this issue
to compromise key generation, certificate loading and other card
management operations. This issue only affected Ubuntu 20.04 LTS and
Ubuntu 22.04 LTS. (CVE-2023-40661)
Hubert Kario, Michal Shagam and Eyal Ronen discovered that OpenSC had a
timing side-channel and incorrectly handled RSA padding. An attacker
could possibly use this issue to recover sensitive information. This issue
only affected Ubuntu 22.04 LTS. (CVE-2023-5992)
Matteo Marini discovered that OpenSC did not properly manage memory due to
certain uninitialized variables. A physically proximate attacker could
possibly use this issue to gain unauthorized access to certain systems.
This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,
Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2024-45615)
Matteo Marini discovered that OpenSC did not correctly handle certain
memory operations. A physically proximate attacker could possibly use this
issue to gain unauthorized access to certain systems. This issue only
affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and
Ubuntu 24.10. (CVE-2024-45616, CVE-2024-45617)
Matteo Marini discovered that OpenSC did not correctly handle certain
memory operations. A physically proximate attacker could possibly use this
issue to gain unauthorized access to certain systems.
(CVE-2024-45618, CVE-2024-45620)
Matteo Marini discovered that OpenSC did not correctly handle certain
memory operations. A physically proximate attacker could possibly use this
issue to gain unauthorized access to certain systems. This issue only
affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10.
(CVE-2024-45619)
It was discovered that OpenSC did not correctly handle certain memory
operations, which could lead to a buffer overflow. A physically
proximate attacker could possibly use this issue to compromise card
management operations during enrollment and modification. This issue only
affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and
Ubuntu 24.10. (CVE-2024-8443)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 24.10
opensc 0.25.1-2ubuntu1.1
opensc-pkcs11 0.25.1-2ubuntu1.1
Ubuntu 24.04 LTS
opensc 0.25.0~rc1-1ubuntu0.1~esm1
Available with Ubuntu Pro
opensc-pkcs11 0.25.0~rc1-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 22.04 LTS
opensc 0.22.0-1ubuntu2+esm1
Available with Ubuntu Pro
opensc-pkcs11 0.22.0-1ubuntu2+esm1
Available with Ubuntu Pro
Ubuntu 20.04 LTS
opensc 0.20.0-3ubuntu0.1~esm2
Available with Ubuntu Pro
opensc-pkcs11 0.20.0-3ubuntu0.1~esm2
Available with Ubuntu Pro
Ubuntu 18.04 LTS
opensc 0.17.0-3ubuntu0.1~esm2
Available with Ubuntu Pro
opensc-pkcs11 0.17.0-3ubuntu0.1~esm2
Available with Ubuntu Pro
Ubuntu 16.04 LTS
opensc 0.15.0-1ubuntu1+esm2
Available with Ubuntu Pro
opensc-pkcs11 0.15.0-1ubuntu1+esm2
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-7346-1
CVE-2021-42780, CVE-2021-42782, CVE-2023-2977, CVE-2023-40660,
CVE-2023-40661, CVE-2023-5992, CVE-2024-45615, CVE-2024-45616,
CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620,
CVE-2024-8443
Package Information:
https://launchpad.net/ubuntu/+source/opensc/0.25.1-2ubuntu1.1
--------------USrtrblnvb7KpwVvbhKyuwCx--
--------------0B8eqbSWDmmIJrqHlHVu5OuD
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"
-----BEGIN PGP SIGNATURE-----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=5Ar+
-----END PGP SIGNATURE-----
--------------0B8eqbSWDmmIJrqHlHVu5OuD--
--===============1405931798450511812==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
Cg==
--===============1405931798450511812==--
|
