Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-2977

18
FAUCET Score

CVE-2023-2977 is a buffer overrun vulnerability in OpenSC's pkcs15 cardos_have_verifyrc_package function, affecting OpenSC and Red Hat Enterprise Linux. An attacker can trigger a heap-based out-of-bounds read by supplying a smart card package with malformed ASN.1 context, potentially leading to a crash or information leak. Rated as High severity (CVSS 7.1), it requires local access and low privileges, with no user interaction. There is currently no evidence of active exploitation, public exploit code, or significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
0.23.0CPE matchmatch criteria
cpe:2.3:a:opensc_project:opensc:0.23.0:-:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
9.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.1HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.29%
Probability of exploitation in next 30 days
EPSS Percentile
21.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0029 is in the 58th percentile among its peer group of 17,070 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (16)

autodeskpatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
github_advisorypatch availablevia nvd_reference
View patch
honeywellpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: cbl2 opensc 0.22.0-3 on CBL Mariner 2.0Fixed in: 0.22.0-3
microsoftpatch availablevia msrc
Product: azl3 opensc 0.22.0-3 on Azure Linux 3.0Fixed in: 0.22.0-3
microsoftpatch availablevia msrc
Product: azl3 opensc 0.23.0-1 on Azure Linux 3.0Fixed in: 0.25.1-3
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 x64Fixed in: 0.22.0-2
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 ARMFixed in: 0.22.0-2
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 0.22.0-3
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 0.22.0-3
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 0.25.1-3
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 0.25.1-3
microsoftpatch availablevia msrc
Product: cm1 opensc 0.22.0-2 on CBL Mariner 1.0Fixed in: 0.22.0-2
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: opensc-0:0.23.0-2.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: opensc-0:0.20.0-6.el8
View patch

Vendor Advisories (6)

honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
microsoft2024-Jun/CVE-2023-2977

CVE-2023-2977

Jun 11, 2024
microsoft2023-Jun/CVE-2023-2977Important

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags where remaining length is wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is possible.

Jun 13, 2023
redhatCVE-2023-2977Low

opensc: buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package

May 30, 2023

References

lists.debian.org / debian-lts-announce/2024/12/msg00026.html
access.redhat.com / security/cve/CVE-2023-2977
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingThird Party Advisory
github.com / OpenSC/OpenSC/issues/2785
Issue TrackingPatch
github.com / OpenSC/OpenSC/pull/2787
Patch
lists.debian.org / debian-lts-announce/2023/06/msg00025.html
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/FJD4Q4AJSGE5UIJI7OUYZY4HGGCVYQNI
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/LAR54OV6EHA56B4XJF6RNPQ4HJ2ITU66