SUSE-SU-2025:20072-1: opensc&distro=SUSE Linux Micro 6.0 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2025:20072-1 is a vulnerability in opensc&distro=SUSE Linux Micro 6.0 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 7 · Downstream 0 · Related 7Timeline
- 03-02-2025PublishedVulnerability first disclosed.
- 23-03-2026Last modifiedVulnerability information updated.
Description
Security update for opensc This update for opensc fixes the following issues: - CVE-2024-8443: Fixed heap buffer overflow in OpenPGP driver when generating key (bsc#1230364) - CVE-2024-45620: Fixed incorrect handling of the length of buffers or files in pkcs15init (bsc#1230076) - CVE-2024-45619: Fixed incorrect handling length of buffers or files in libopensc (bsc#1230075) - CVE-2024-45618: Fixed uninitialized values after incorrect or missing checking return values of functions in pkcs15init (bsc#1230074) - CVE-2024-45617: Fixed uninitialized values after incorrect or missing checking return values of functions in libopensc (bsc#1230073) - CVE-2024-45616: Fixed uninitialized values after incorrect check or usage of APDU response values in libopensc (bsc#1230072) - CVE-2024-45615: Fixed uninitialized values in libopensc and pkcs15init (bsc#1230071)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- opensc&distro=SUSE Linux Micro 6.0< 0.24.0-3.1
1 vendor · 1 product