CVE-2024-45620: Enterprise Linux: arabellek taşması

Açıklama (NVD)

A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accessed.

Özet bilgiler

Ürün

Redhat Enterprise Linux

CVSS v3.1

3.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE

CWE-120

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• access.redhat.com
• bugzilla.redhat.com
• lists.debian.org
• CWE-120