{
  "cveId": "CVE-2023-4535",
  "url": "https://patchblox.com/security/cve/CVE-2023-4535",
  "summary": "CVE-2023-4535 is fixed in 3 products on 1 platform, first by ALAS2023-2023-417, released October 30, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "opensc: The OpenSC set of libraries and utilities provides support for working with smart cards",
  "description": "The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures.\n\nSecurity Fix(es):\n\n* OpenSC: Potential PIN bypass when card tracks its own login state (CVE-2023-40660)\n\n* OpenSC: multiple memory issues with pkcs15-init (enrollment tool) (CVE-2023-40661)\n\n* OpenSC: out-of-bounds read in MyEID driver handling encryption using symmetric keys (CVE-2023-4535)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "published": "2023-10-30T23:44:00Z",
  "severity": "Moderate",
  "cvss": 4.5,
  "cvssVector": "CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
  "epss": 0.00487,
  "epssPercentile": 0.42187,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "opensc",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "0.23.0-0.3\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2023-4535",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-4535",
      "released": "2023-11-06T17:15:12Z"
    },
    {
      "platform": "linux",
      "product": "opensc",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "0.23.0-2",
      "fix": "DEBIAN-CVE-2023-4535",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-4535",
      "released": "2023-11-06T17:15:12Z"
    },
    {
      "platform": "linux",
      "product": "opensc",
      "release": "Debian 14",
      "fixedVersion": "0.23.0-2",
      "fix": "DEBIAN-CVE-2023-4535",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-4535",
      "released": "2023-11-06T17:15:12Z"
    },
    {
      "platform": "linux",
      "product": "opensc",
      "release": "RHEL 9",
      "fixedVersion": "0:0.23.0-3.el9_3",
      "fix": "RHSA-2023:7879",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-7879",
      "released": "2023-12-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "opensc",
      "release": "almalinux 9",
      "fixedVersion": "0.23.0-3.el9_3",
      "fix": "ALSA-2023:7879",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-7879",
      "released": "2023-12-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "opensc",
      "release": "amzn 2023",
      "fixedVersion": "0.23.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-417",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-417",
      "released": "2023-10-30T23:44:00Z"
    },
    {
      "platform": "linux",
      "product": "opensc",
      "release": "ol 9",
      "fixedVersion": "0:0.23.0-3.el9_3",
      "fix": "ELSA-2023-7879",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-7879",
      "released": "2023-12-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "opensc-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "0.23.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-417",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-417",
      "released": "2023-10-30T23:44:00Z"
    },
    {
      "platform": "linux",
      "product": "opensc-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "0.23.0-3.amzn2023.0.2",
      "fix": "ALAS2023-2023-417",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-417",
      "released": "2023-10-30T23:44:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}