CVE Vulnerabilities

CVE-2024-45615

Use of Uninitialized Resource

Published: Sep 03, 2024 | Modified: Sep 13, 2024
CVSS 3.x
3.9
LOW
Source:
NVD
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 2.x
RedHat/V2
RedHat/V3
3.9 LOW
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Ubuntu
MEDIUM

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. The problem is missing initialization of variables expected to be initialized (as arguments to other functions, etc.).

Weakness

The product uses or accesses a resource that has not been initialized.

Affected Software

Name Vendor Start Version End Version
Enterprise_linux Redhat 7.0 (including) 7.0 (including)
Enterprise_linux Redhat 8.0 (including) 8.0 (including)
Enterprise_linux Redhat 9.0 (including) 9.0 (including)

Potential Mitigations

References