CVE-2018-16427

CVE-2018-16427

Name

CVE-2018-16427

Description

Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
Third Party Advisory	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/
Release Notes	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1
Patch	https://github.com/OpenSC/OpenSC/pull/1447/commits/8fe377e93b4b56060e5bbfb6f3142ceaeca744fa
REDHAT	https://access.redhat.com/errata/RHSA-2019:2154
MLIST	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html

Type

URI

Third Party Advisory

https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/

Release Notes

https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1

Patch

https://github.com/OpenSC/OpenSC/pull/1447/commits/8fe377e93b4b56060e5bbfb6f3142ceaeca744fa

REDHAT

https://access.redhat.com/errata/RHSA-2019:2154

MLIST

https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html