[USN-7346-3] OpenSC vulnerabilities

-----BEGIN PGP SIGNATURE-----
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=c4WR
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-7346-3
April 09, 2025

opensc vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS

Summary:

USN-7346-1 introduced a regression in OpenSC.

Software Description:
- opensc: Smart card utilities with support for PKCS#15 compatible cards

Details:

USN-7346-1 fixed vulnerabilities in OpenSC. The update introduced a
regression which broke smartcard based authentication. This update fixes
the problem.

We apologize for the inconvenience.

Original advisory details:

 It was discovered that OpenSC did not correctly handle certain memory
 operations, which could lead to a use-after-free vulnerability. An
 attacker could possibly use this issue to cause a denial of service or
 execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
 Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-42780)

 It was discovered that OpenSC did not correctly handle certain memory
 operations, which could lead to a stack buffer overflow. An attacker
 could possibly use this issue to cause a denial of service or execute
 arbitrary code. This issue only affected Ubuntu 20.04 LTS.
 (CVE-2021-42782)

 It was discovered that OpenSC did not correctly handle the length of
 certain buffers, which could lead to a out-of-bounds access vulnerability.
 An attacker could possibly use this issue to cause a denial of service or
 execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
 Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-2977)

 Deepanjan Pal discovered that OpenSC did not correctly authenticate a zero
 length PIN. A physically proximate attacker could possibly use this issue
 to gain unauthorized access to certain systems. This issue only affected
 Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-40660)

 It was discovered that OpenSC did not correctly handle certain memory
 operations. A physically proximate attacker could possibly use this issue
 to compromise key generation, certificate loading and other card
 management operations. This issue only affected Ubuntu 20.04 LTS and
 Ubuntu 22.04 LTS. (CVE-2023-40661)

 Hubert Kario, Michal Shagam and Eyal Ronen discovered that OpenSC had a
 timing side-channel and incorrectly handled RSA padding. An attacker
 could possibly use this issue to recover sensitive information. This issue
 only affected Ubuntu 22.04 LTS. (CVE-2023-5992)

 Matteo Marini discovered that OpenSC did not properly manage memory due to
 certain uninitialized variables. A physically proximate attacker could
 possibly use this issue to gain unauthorized access to certain systems.
 This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,
 Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2024-45615)

 Matteo Marini discovered that OpenSC did not correctly handle certain
 memory operations. A physically proximate attacker could possibly use this
 issue to gain unauthorized access to certain systems. This issue only
 affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and
 Ubuntu 24.10. (CVE-2024-45616, CVE-2024-45617)

 Matteo Marini discovered that OpenSC did not correctly handle certain
 memory operations. A physically proximate attacker could possibly use this
 issue to gain unauthorized access to certain systems.
 (CVE-2024-45618, CVE-2024-45620)

 Matteo Marini discovered that OpenSC did not correctly handle certain
 memory operations. A physically proximate attacker could possibly use this
 issue to gain unauthorized access to certain systems. This issue only
 affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10.
 (CVE-2024-45619)

 It was discovered that OpenSC did not correctly handle certain memory
 operations, which could lead to a buffer overflow. A physically
 proximate attacker could possibly use this issue to compromise card
 management operations during enrollment and modification. This issue only
 affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and
 Ubuntu 24.10. (CVE-2024-8443)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  opensc                          0.20.0-3ubuntu0.1~esm4
                                  Available with Ubuntu Pro
  opensc-pkcs11                   0.20.0-3ubuntu0.1~esm4
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7346-3
  https://ubuntu.com/security/notices/USN-7346-2
  https://ubuntu.com/security/notices/USN-7346-1
  CVE-2021-42780, CVE-2021-42782, CVE-2023-2977, CVE-2023-40660,
  CVE-2023-40661, CVE-2024-45615, CVE-2024-45616, CVE-2024-45617,
  CVE-2024-45618, CVE-2024-45620, CVE-2024-8443,
https://launchpad.net/bugs/2104948