Msrc Azl3 Opensc 0.23.0-1 On Azure Linux 3.0 vulnerabilities

CVE-2024-1454 [LOW] CWE-416 Opensc: memory use after free in authentic driver when updating token info Opensc: memory use after free in authentic driver when updating token info FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of th

CVE-2023-5992 [MEDIUM] CWE-203 Opensc: side-channel leaks while stripping encryption pkcs#1 padding Opensc: side-channel leaks while stripping encryption pkcs#1 padding FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open so

CVE-2023-40661 [MEDIUM] CWE-119 Opensc: multiple memory issues with pkcs15-init (enrollment tool) Opensc: multiple memory issues with pkcs15-init (enrollment tool) FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source

CVE-2023-40660 [MEDIUM] CWE-287 Opensc: potential pin bypass when card tracks its own login state Opensc: potential pin bypass when card tracks its own login state FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source

CVE-2023-4535 [MEDIUM] CWE-125 Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most

CVE-2023-2977 [HIGH] CWE-125 A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 con A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer