CVE & CISA-KEV Catalog

CVE-2023-2977

HIGH
7.1
CVSS v3
NVD

Description

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is possible.

How to fix

Remediation Available
openscDebian
Fixed in:0.21.0-1+deb11u1CVE-2023-2977
Fixed in:0.23.0-0.3CVE-2023-2977
Fixed in:0.23.0-0.3CVE-2023-2977
Fixed in:0.23.0-0.3CVE-2023-2977
openscRocky
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
openscRed Hat / RHEL
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
opensc-debuginfoRed Hat / RHEL
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
opensc-debuginfoRocky
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
opensc-debugsourceRed Hat / RHEL
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
opensc-debugsourceRocky
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.20.0-6.el8RHSA-2023:7160
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
Fixed in:0:0.23.0-2.el9RHSA-2023:6587
openscUbuntu
Fixed in:0.15.0-1ubuntu1+esm2USN-7346-1
Fixed in:0.17.0-3ubuntu0.1~esm2USN-7346-1
Fixed in:0.20.0-3ubuntu0.1~esm4USN-7346-3
Fixed in:0.20.0-3ubuntu0.1~esm2USN-7346-1
Fixed in:0.22.0-1ubuntu2+esm1USN-7346-1
Fixed in:0.25.0~rc1-1ubuntu0.1~esm1USN-7346-1
opensc-pkcs11Ubuntu
Fixed in:0.15.0-1ubuntu1+esm2USN-7346-1
Fixed in:0.17.0-3ubuntu0.1~esm2USN-7346-1
Fixed in:0.20.0-3ubuntu0.1~esm4USN-7346-3
Fixed in:0.20.0-3ubuntu0.1~esm2USN-7346-1
Fixed in:0.22.0-1ubuntu2+esm1USN-7346-1
Fixed in:0.25.0~rc1-1ubuntu0.1~esm1USN-7346-1

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityHigh
IntegrityNone
AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploit Intelligence

0.29%probability of exploitation in 30 days
21stpercentile

Low risk: more likely to be exploited than 21% of all known CVEs.

References

Related Vulnerabilities

Other CWE-119 (Buffer Overflow) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2023-4966Critical9.4100%KEV + RansomFix
CVE-2017-11882High7.8100%KEV + Ransom-
CVE-2020-0796Critical10.0100%KEV + Ransom-
CVE-2008-4250Critical9.899%KEV-
CVE-2017-15944Critical9.898%KEVFix
CVE-2015-0014High10.097%--
Embed a live status badge for CVE-2023-2977
CVE-2023-2977 severity badge

Markdown

[![CVE-2023-2977](https://tridentstack.com/cve/badge/CVE-2023-2977.svg)](https://tridentstack.com/cve/CVE-2023-2977)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-2977"><img src="https://tridentstack.com/cve/badge/CVE-2023-2977.svg" alt="CVE-2023-2977"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-11-03.