CVE-2018-16392 (NVD)

2018-09-03

Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

Products Opensc
Type Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
First patch https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b2a356323a9ff2024d041cf2d7e89dd3
Relevant file/s • ./src/libopensc/card-cac.c (modified, +1, -1)
• ./src/libopensc/card-epass2003.c (modified, +2, -1)
• ./src/libopensc/card-muscle.c (modified, +5, -2)
• ./src/libopensc/card-tcos.c (modified, +3, -3)
• ./src/libopensc/pkcs15-esteid.c (modified, +1, -1)
• ./src/libopensc/pkcs15-gemsafeV1.c (modified, +1, -1)
• ./src/libopensc/pkcs15-sc-hsm.c (modified, +8, -6)
• ./src/libopensc/sc.c (modified, +1, -1)
• ./src/tools/cryptoflex-tool.c (modified, +3, -2)
• ./src/tools/egk-tool.c (modified, +1, -1)
• ./src/tools/util.c (modified, +3, -2)
Links https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/
https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1
https://access.redhat.com/errata/RHSA-2019:2154

OpenSC - Tree: 360e95d45a

(? files)

Filter Settings
Files
Navigation
Patch data:

(on by default)


Patched area: