Fedora Account System
Red Hat Associate
Red Hat Customer
Several memory issues that are security relevant that were reported since the release of OpenSC 0.23.0 and that are relevant to the handling the card enrollment process using pkcs15-init. All of these require physical access to the computer at the time user or administrator would be enrolling the cards (generating keys and loading certificates, other card/token management) operations. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs so they are considered a high-complexity and low-severity. This issue is not exploitable just by using a PKCS#11 module as done in most of the end-user deployments. https://github.com/OpenSC/OpenSC/issues/2792#issuecomment-1674806651 https://github.com/OpenSC/OpenSC/wiki/OpenSC-security-advisories https://github.com/OpenSC/OpenSC/releases/tag/0.24.0-rc1
All memory issues reference bugs: * Stack buffer overflow in sc_pkcs15_get_lastupdate in pkcs15init https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60769 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60527 * Heap buffer overflow in setcos_create_key in pkcs15init https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60672 * Heap buffer overflow in cosm_new_file in pkcs15init https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60650 * Heap double free in sc_pkcs15_free_object_content https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60616 * Stack buffer overflow in cflex_delete_file in pkcs15init https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58932 * Heap buffer overflow in sc_hsm_write_ef in pkcs15init https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56213 * Stack buffer overflow while parsing pkcs15 profile files https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55998 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55851 * Stack buffer overflow in muscle driver in pkcs15init https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54312 * Stack buffer overflow in cardos driver in pkcs15init https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53927
Created opensc tracking bugs for this issue: Affects: fedora-all [bug 2248099]
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2023:7876 https://access.redhat.com/errata/RHSA-2023:7876
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2023:7879 https://access.redhat.com/errata/RHSA-2023:7879