ID:

CVE-2018-16419 (NVD)

- Vulnerability Info (edit)
2018-09-03

Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

Products opensc
Type Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
First patch
2018-08-14
https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-a6074523a9cbd875e26c58e20868fb15
"fixed out of bounds writes Thanks to Eric Sesterhenn from X41 D-SEC GmbH for reporting the problems."

Stats: +29 lines / -21 lines (total: 50 lines)
Patches https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1
Relevant file/s • ./src/libopensc/card-cac.c (modified, +1, -1)
• ./src/libopensc/card-epass2003.c (modified, +2, -1)
• ./src/libopensc/card-muscle.c (modified, +5, -2)
• ./src/libopensc/card-tcos.c (modified, +3, -3)
• ./src/libopensc/pkcs15-esteid.c (modified, +1, -1)
• ./src/libopensc/pkcs15-gemsafeV1.c (modified, +1, -1)
• ./src/libopensc/pkcs15-sc-hsm.c (modified, +8, -6)
• ./src/libopensc/sc.c (modified, +1, -1)
• ./src/tools/cryptoflex-tool.c (modified, +3, -2)
• ./src/tools/egk-tool.c (modified, +1, -1)
• ./src/tools/util.c (modified, +3, -2)
Links https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/
Annotation

Note:

This entry has not been annotated yet.

Please consider adding data:

OpenSC - Tree: 360e95d45a

(? files)

Filter Settings
Files
Navigation
Patch data:

(on by default)


Patched area: