| Package | Affected versions | Patched versions |
|---|---|---|
| opensc | = 0.10.0= 0.10.1= 0.11.0= 0.11.1= 0.11.2= 0.11.3= 0.11.4= 0.11.5= 0.3.2= 0.3.5= 0.4.0= 0.5.0= 0.6.0= 0.6.1= 0.7.0= 0.8= 0.8.0= 0.8.0.0= 0.8.1= 0.9= 0.9.2= 0.9.3= 0.9.4= 0.9.5= 0.9.6= 0.9.7= 0.9.8≤ 0.11.6 |
OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free