PT-2018-13554 · Opensc+4 · Opensc+4

Eric Sesterhenn

·

Publicado

2018-09-04

·

Atualizado

2024-06-15

·

CVE-2018-16418

CVSS v3.1

6.6

Média

VetorAV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.19.0-rc1
Description A buffer overflow issue exists when handling string concatenation in the util acl to str function in tools/util.c. This could be exploited by attackers who can supply crafted smartcards, potentially causing a denial of service (application crash) or having other unspecified impacts.
Recommendations For versions prior to 0.19.0-rc1, update to version 0.19.0-rc1 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2018-2326
CESA-2019_2154
CVE-2018-16418
DLA-1916-1
MGASA-2019-0019
OPENSUSE-SU-2018_3701-1
OPENSUSE-SU-2018_3716-1
OPENSUSE-SU-2024:11123-1
RHSA-2019:2154
RHSA-2019_2154
SUSE-SU-2018:3621-1
SUSE-SU-2018:3622-1
SUSE-SU-2018:3622-2
SUSE-SU-2018:3629-1

Produtos afetados

Alt Linux
Centos
Opensc
Red Hat
Suse