{"schemaVersion":3,"id":"CVE-2023-2977","aliases":["MGASA-2023-0222","SUSE-SU-2023:2466-1","SUSE-SU-2023:2508-1","SUSE-SU-2023:2516-1","RHSA-2023:6587","RHSA-2023:7160","UBUNTU-CVE-2023-2977","DEBIAN-CVE-2023-2977","openSUSE-SU-2024:12968-1"],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is possible.","dates":{"published":"2023-06-01T00:00:00.000Z","modified":"2025-11-03T21:47:59.585Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.1,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.1,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":6.3,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","exploitability":2.6,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.1,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","exploitability":4.6,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.1,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","exploitability":4.6,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.1,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00293,"percentile":0.20572,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00293},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00293,"percentile":0.20572}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00293,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00293,"percentile":0.20572}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"},{"id":"CWE-125","name":"Out-of-bounds Read","description":"The product reads data past the end, or before the beginning, of the intended buffer.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/125.html"}],"affected":[{"vendor":"debian","product":"opensc","name":"opensc","label":"opensc","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/opensc","purlType":"deb","versions":[{"text":"< 0.23.0-0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.23.0-0.3","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"opensc","name":"opensc","label":"opensc","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/opensc","purlType":"deb","versions":[{"text":"< 0.15.0-1ubuntu1+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 0.17.0-3ubuntu0.1~esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 0.20.0-3ubuntu0.1~esm4","noFixRecorded":false,"fixedIn":null},{"text":"< 0.22.0-1ubuntu2+esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.15.0-1ubuntu1+esm2 | < 0.17.0-3ubuntu0.1~esm2 | < 0.20.0-3ubuntu0.1~esm4 | < 0.22.0-1ubuntu2+esm1","eol":null,"hubHref":null},{"vendor":"mageia","product":"opensc","name":"opensc","label":"opensc","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/opensc","purlType":"rpm","versions":[{"text":"< 0.22.0-1.1.mga8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.22.0-1.1.mga8","eol":null,"hubHref":null},{"vendor":"opensc_project","product":"opensc","name":"opensc","label":"opensc","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"0.23.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"0.23.0","eol":null,"hubHref":"/vendor/opensc_project/opensc"},{"vendor":"redhat","product":"enterprise_linux","name":"enterprise linux","label":"enterprise_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0","noFixRecorded":false,"fixedIn":null},{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0 | 9.0","eol":{"isEol":false,"eolDate":"2029-05-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"8","label":"8 (Upcoming ELS)","eolFrom":"2029-05-31T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"8.10"},"product":{"name":"rhel","label":"Red Hat Enterprise Linux","category":"os"}},"hubHref":"/vendor/redhat/enterprise_linux"},{"vendor":"opensuse","product":"opensc&distro=openSUSE Leap 15.4","name":"opensc","label":"opensc&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/opensc&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 0.22.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.22.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"opensc&distro=openSUSE Leap 15.5","name":"opensc","label":"opensc&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/opensc&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 0.22.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.22.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"opensc&distro=openSUSE Leap Micro 5.3","name":"opensc","label":"opensc&distro=openSUSE Leap Micro 5.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/opensc&distro=openSUSE Leap Micro 5.3","purlType":"rpm","versions":[{"text":"< 0.22.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.22.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"opensc&distro=openSUSE Tumbleweed","name":"opensc","label":"opensc&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/opensc&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 0.23.0-2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.23.0-2.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"opensc","name":"opensc","label":"opensc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/opensc","purlType":"rpm","versions":[{"text":"< 0:0.23.0-2.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:0.20.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:0.23.0-2.el9 | < 0:0.20.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"opensc-debuginfo","name":"opensc-debuginfo","label":"opensc-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/opensc-debuginfo","purlType":"rpm","versions":[{"text":"< 0:0.23.0-2.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:0.20.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:0.23.0-2.el9 | < 0:0.20.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"opensc-debugsource","name":"opensc-debugsource","label":"opensc-debugsource","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/opensc-debugsource","purlType":"rpm","versions":[{"text":"< 0:0.23.0-2.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:0.20.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:0.23.0-2.el9 | < 0:0.20.0-6.el8","eol":null,"hubHref":null},{"vendor":"suse","product":"opensc&distro=SUSE Linux Enterprise Micro 5.1","name":"opensc","label":"opensc&distro=SUSE Linux Enterprise Micro 5.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/opensc&distro=SUSE Linux Enterprise Micro 5.1","purlType":"rpm","versions":[{"text":"< 0.19.0-150100.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-150100.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"opensc&distro=SUSE Linux Enterprise Micro 5.2","name":"opensc","label":"opensc&distro=SUSE Linux Enterprise Micro 5.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/opensc&distro=SUSE Linux Enterprise Micro 5.2","purlType":"rpm","versions":[{"text":"< 0.19.0-150100.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-150100.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"opensc&distro=SUSE Linux Enterprise Micro 5.3","name":"opensc","label":"opensc&distro=SUSE Linux Enterprise Micro 5.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/opensc&distro=SUSE Linux Enterprise Micro 5.3","purlType":"rpm","versions":[{"text":"< 0.22.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.22.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"opensc&distro=SUSE Linux Enterprise Micro 5.4","name":"opensc","label":"opensc&distro=SUSE Linux Enterprise Micro 5.4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/opensc&distro=SUSE Linux Enterprise Micro 5.4","purlType":"rpm","versions":[{"text":"< 0.22.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.22.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"opensc&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","name":"opensc","label":"opensc&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/opensc&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","purlType":"rpm","versions":[{"text":"< 0.22.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.22.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"opensc&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","name":"opensc","label":"opensc&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/opensc&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","purlType":"rpm","versions":[{"text":"< 0.22.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.22.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"opensc&distro=SUSE Linux Enterprise Real Time 15 SP3","name":"opensc","label":"opensc&distro=SUSE Linux Enterprise Real Time 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/opensc&distro=SUSE Linux Enterprise Real Time 15 SP3","purlType":"rpm","versions":[{"text":"< 0.19.0-150100.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-150100.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"opensc&distro=SUSE Linux Enterprise Server 12 SP5","name":"opensc","label":"opensc&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/opensc&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 0.13.0-3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.13.0-3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"opensc&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"opensc","label":"opensc&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/opensc&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 0.13.0-3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.13.0-3.22.1","eol":null,"hubHref":null}],"affectedCount":21,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-2977","label":"access.redhat.com/security/cve/CVE-2023-2977","hostname":"access.redhat.com","tags":["REPORT","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211088","label":"bugzilla.redhat.com/show_bug.cgi?id=2211088","hostname":"bugzilla.redhat.com","tags":["REPORT","Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/OpenSC/OpenSC/issues/2785","label":"github.com/OpenSC/OpenSC/issues/2785","hostname":"github.com","tags":["REPORT","Issue Tracking","Patch"]},{"url":"https://github.com/OpenSC/OpenSC/pull/2787","label":"github.com/OpenSC/OpenSC/pull/2787","hostname":"github.com","tags":["REPORT","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00025.html","label":"lists.debian.org/debian-lts-announce/2023/06/msg00025.html","hostname":"lists.debian.org","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAR54OV6EHA56B4XJF6RNPQ4HJ2ITU66/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FJD4Q4AJSGE5UIJI7OUYZY4HGGCVYQNI/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/12/msg00026.html","label":"lists.debian.org/debian-lts-announce/2024/12/msg00026.html","hostname":"lists.debian.org","tags":[]},{"url":"https://advisories.mageia.org/MGASA-2023-0222.html","label":"advisories.mageia.org/MGASA-2023-0222.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32036","label":"bugs.mageia.org/show_bug.cgi?id=32036","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.debian.org/lts/security/2023/dla-3463","label":"www.debian.org/lts/security/2023/dla-3463","hostname":"www.debian.org","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232466-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20232466-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1211894","label":"bugzilla.suse.com/1211894","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2977","label":"www.suse.com/security/cve/CVE-2023-2977","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232508-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20232508-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232516-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20232516-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6587","label":"access.redhat.com/errata/RHSA-2023:6587","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","label":"access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6587.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6587.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2977","label":"www.cve.org/CVERecord?id=CVE-2023-2977","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2977","label":"nvd.nist.gov/vuln/detail/CVE-2023-2977","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7160","label":"access.redhat.com/errata/RHSA-2023:7160","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index","label":"access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097048","label":"bugzilla.redhat.com/show_bug.cgi?id=2097048","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196234","label":"bugzilla.redhat.com/show_bug.cgi?id=2196234","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7160.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7160.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-2977","label":"ubuntu.com/security/CVE-2023-2977","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7346-1","label":"ubuntu.com/security/notices/USN-7346-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7346-3","label":"ubuntu.com/security/notices/USN-7346-3","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-2977","label":"security-tracker.debian.org/tracker/CVE-2023-2977","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-3463-1","DLA-4004-1","USN-7346-1","USN-7346-3"],"duplicates":[],"related":["USN-7346-1","USN-7346-3"]},"timeline":[{"kind":"published","date":"2023-06-01T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-03T21:47:59.585Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T01:05:07.492Z","stale":false,"partial":false}}