ID:

CVE-2018-16419 (NVD)

- Vulnerability Info (edit)
2018-09-04

Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

Products Opensc
Type Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
First patch https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-a6074523a9cbd875e26c58e20868fb15
Patches https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1
Relevant file/s • ./src/libopensc/card-cac.c (modified, +1, -1)
• ./src/libopensc/card-epass2003.c (modified, +2, -1)
• ./src/libopensc/card-muscle.c (modified, +5, -2)
• ./src/libopensc/card-tcos.c (modified, +3, -3)
• ./src/libopensc/pkcs15-esteid.c (modified, +1, -1)
• ./src/libopensc/pkcs15-gemsafeV1.c (modified, +1, -1)
• ./src/libopensc/pkcs15-sc-hsm.c (modified, +8, -6)
• ./src/libopensc/sc.c (modified, +1, -1)
• ./src/tools/cryptoflex-tool.c (modified, +3, -2)
• ./src/tools/egk-tool.c (modified, +1, -1)
• ./src/tools/util.c (modified, +3, -2)
Links https://access.redhat.com/errata/RHSA-2019:2154
https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/
Annotation

Note:

This entry has not been annotated yet.

Please consider adding data:

OpenSC - Tree: 360e95d45a

(? files)

Filter Settings
Files
Navigation
Patch data:

(on by default)


Patched area: