OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow (OpenSC)
En bref
- Source
- NVD
- EPSS
- EPSS 0.30 % · centile 22 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- VulDB
- Statut NVD
- Deferred
Description
A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been published and may be used. Patch name: 814f745b3b6d100295f65f1935edd33d520d33ab. It is recommended to apply a patch to fix this issue.
Faiblesses (CWE)
- CWE-120 — Copie de tampon sans vérification de taille (débordement classique)
- CWE-119 — Opération hors des limites d'un tampon mémoire
Références
- https://vuldb.com/vuln/367568
- https://vuldb.com/vuln/367568/cti
- https://vuldb.com/cve/CVE-2026-10275
- https://vuldb.com/submit/825403
- https://github.com/OpenSC/OpenSC/issues/3682
- https://github.com/OpenSC/OpenSC/pull/3684
- https://pan.baidu.com/s/1nrZPKDz2eAcCpsaFiIRlrg
- https://github.com/OpenSC/OpenSC/commit/814f745b3b6d100295f65f1935edd33d520d33ab
- https://github.com/OpenSC/OpenSC/
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 4.0 | LOW 2.3 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| CVSS 3.1 | MEDIUM 5.0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C | VulDB |
| CVSS 3.0 | MEDIUM 5.0 | CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C | VulDB |
| CVSS 2.0 | MEDIUM 5.1 | AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C | VulDB |
| CVSS 4.0 | LOW 1.3 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | NVD · cna@vuldb.com (Secondary) |
| CVSS 3.1 | MEDIUM 5.0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L | NVD · cna@vuldb.com (Secondary) |
| CVSS 2.0 | MEDIUM 5.1 | AV:N/AC:H/Au:N/C:P/I:P/A:P | NVD · cna@vuldb.com (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-33680
- GCVE · GCVE-0-2026-10275
Avis du CERT-FR
- CERTFR-2026-AVI-0783 — Multiples vulnérabilités dans Microsoft Azure · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| OpenSC | affected 0.26.0 ; affected 0.26.1 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |