CVE-2009-1603: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted.

Affected products

• Fedoraproject Fedora: version 9 only; version 10 only; version 11 only
• Opensc-Project Opensc: version 0.11.7 only

Published 2009-05-11. Last modified 2026-06-16.