CVE-2009-1603

7.5 highEPSS 1.1%

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2009-05-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

fedoraproject:fedora
opensc-project:opensc

References

http://secunia.com/advisories/35035
http://secunia.com/advisories/35293
http://secunia.com/advisories/35309
http://secunia.com/advisories/36074
http://security.gentoo.org/glsa/glsa-200908-01.xml

Check your stack JSON