CVE-2018-16427
published 2018-09-04CVE-2018-16427: Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially…
medium4.3CVSS 3.0
AVPACLPRLUINSUCNINAH
Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | opensc | < opensc 0.19.0~rc1-1 (bookworm) | opensc 0.19.0~rc1-1 (bookworm) |
| opensc_project | opensc | <= 0.18.0 | — |
| opensc_project | opensc | >= 0 < 0.19.0~rc1-1 | 0.19.0~rc1-1 |
| opensc_project | opensc | >= 0 < 0.19.0~rc1-1 | 0.19.0~rc1-1 |
| opensc_project | opensc | >= 0 < 0.19.0~rc1-1 | 0.19.0~rc1-1 |
| opensc_project | opensc | >= 0 < 0.19.0~rc1-1 | 0.19.0~rc1-1 |
CVSS provenance
nvdv3.04.3MEDIUMCVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv4.3MEDIUM