{"id":"CVE-2023-4535","aliases":["ALPINE-CVE-2023-4535","ALSA-2023:7879","AZL-31945","AZL-35076","DEBIAN-CVE-2023-4535","EUVD-2023-54390","GHSA-phh2-j3h6-vqr9","RHSA-2023:7879","openSUSE-SU-2024:13314-1"],"status":"published","title":"Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys","description":"An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.","severity":{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00487,"percentile":0.42225,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2023-11-06T16:57:45Z","modified":"2026-11-03T06:32:43Z","fixes":[{"ecosystem":"Alpine:v3.19","package":"opensc","fixed_in":["0.24.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"opensc","fixed_in":["0.24.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"opensc","fixed_in":["0.24.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"opensc","fixed_in":["0.24.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"opensc","fixed_in":["0.24.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"opensc","fixed_in":["0.24.0-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"opensc","fixed_in":["0.23.0-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"opensc","fixed_in":["0.25.1-3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"opensc","fixed_in":["0.23.0-0.3+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"opensc","fixed_in":["0.23.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"opensc","fixed_in":["0.23.0-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-3.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.1-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-0.3+deb12u1"}]}],"versions":["0.23.0-0.3"]},{"source":"osv","ecosystem":"Debian:13","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23.0-3.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opensc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23.0-3.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"opensc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23.0-3.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-3.1"}]}],"bundled":3}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensc_project","product":"opensc"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2023:7879","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4535","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240914","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","report"]},{"url":"https://github.com/OpenSC/OpenSC/commit/f1993dc4e0b33050b8f72a3558ee88b24c4063b2","tags":["x_transferred","Patch","fix","article"]},{"url":"https://github.com/OpenSC/OpenSC/issues/2792#issuecomment-1674806651","tags":["x_transferred","Issue Tracking","Patch","report","article"]},{"url":"https://github.com/OpenSC/OpenSC/releases/tag/0.24.0-rc1","tags":["x_transferred","Release Notes","web","article"]},{"url":"https://github.com/OpenSC/OpenSC/wiki/OpenSC-security-advisories","tags":["x_transferred","Vendor Advisory","advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3CPQOMCDWFRBMEFR5VK4N5MMXXU42ODE/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GLYEFIBBA37TK3UNMZN5NOJ7IWCIXLQP/","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4535","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3CPQOMCDWFRBMEFR5VK4N5MMXXU42ODE"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GLYEFIBBA37TK3UNMZN5NOJ7IWCIXLQP"},{"url":"https://github.com/advisories/GHSA-phh2-j3h6-vqr9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-4535","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40660","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40661","tags":["report"]},{"url":"https://bugzilla.redhat.com/2240912","tags":["report"]},{"url":"https://bugzilla.redhat.com/2240913","tags":["report"]},{"url":"https://bugzilla.redhat.com/2240914","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-7879.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4535.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-4535","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240913","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7879.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4535","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40660","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40660","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40661","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40661","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4535","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-4535","title":"Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys","description":"An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.","status":"published","published":"2023-11-06T16:57:45.785Z","modified":"2026-11-07T05:01:53.232Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-07T05:32:42.683254Z"}],"euvd":[{"id":"EUVD-2023-54390","description":"An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.","status":"published","published":"2023-11-06T16:57:45Z","modified":"2026-11-07T05:01:53Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-07T06:08:30.731226Z"}],"ghsa":[{"id":"GHSA-phh2-j3h6-vqr9","title":"An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when...","description":"An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.","status":"published","published":"2023-11-06T18:30:19Z","modified":"2024-03-03T05:07:01Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:55:38.39087Z"}],"nvd":[{"id":"CVE-2023-4535","description":"An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.","status":"published","published":"2023-11-06T17:15:12.083Z","modified":"2026-11-07T05:17:56.3Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"low","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-07T07:04:19.877179Z"}],"osv":[{"id":"ALPINE-CVE-2023-4535","description":"An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.","status":"published","published":"2023-11-06T17:15:12.083Z","modified":"2026-11-03T06:32:43.516716722Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"low"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"AZL-31945","title":"CVE-2023-4535 affecting package opensc for versions less than 0.23.0-2","description":"An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.","status":"published","published":"2023-11-06T17:15:12Z","modified":"2026-04-21T04:26:35.800225Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-35076","title":"CVE-2023-4535 affecting package opensc for versions less than 0.25.1-3","description":"An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.","status":"published","published":"2023-11-06T17:15:12Z","modified":"2026-04-21T04:48:04.047369Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"CVE-2023-4535","title":"Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys","description":"An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.","status":"published","published":"2023-11-06T16:57:45.785Z","modified":"2026-11-08T13:15:13.960795477Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-08T02:57:30.447698Z"},{"id":"DEBIAN-CVE-2023-4535","description":"An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.","status":"published","published":"2023-11-06T17:15:12.083Z","modified":"2026-11-07T09:47:36.932260753Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"low"}],"updated_at":"2026-11-07T10:14:19.880839Z"},{"id":"RHSA-2023:7879","title":"Red Hat Security Advisory: opensc security update","status":"published","published":"2024-09-16T16:11:12Z","modified":"2026-03-18T11:34:07.710682Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"ALSA-2023:7879","title":"Moderate: opensc security update","description":"The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures.\n\nSecurity Fix(es):\n\n* OpenSC: Potential PIN bypass when card tracks its own login state (CVE-2023-40660)\n* OpenSC: multiple memory issues with pkcs15-init (enrollment tool) (CVE-2023-40661)\n* OpenSC: out-of-bounds read in MyEID driver handling encryption using symmetric keys (CVE-2023-4535)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-12-19T00:00:00Z","modified":"2026-10-29T11:31:37.564481293Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"openSUSE-SU-2024:13314-1","title":"opensc-0.23.0-3.1 on GA media","description":"These are all security issues fixed in the opensc-0.23.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:15:25.295446Z","updated_at":"2026-11-02T16:58:36.025801Z"}]}}