Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-16422

Опубликовано: 04 сент. 2018
Источник: nvd
CVSS3: 6.6
CVSS2: 4.6
EPSS Низкий

Описание

A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:opensc_project:opensc:*:*:*:*:*:*:*:*
Версия до 0.18.0 (включая)

EPSS

Процентиль: 49%
0.00692
Низкий

6.6 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 6.6
ubuntu
почти 8 лет назад

A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 4.3
redhat
почти 8 лет назад

A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 6.6
debian
почти 8 лет назад

A single byte buffer overflow when handling responses from an esteid C ...

CVSS3: 6.6
github
около 4 лет назад

A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

suse-cvrf
почти 8 лет назад

Security update for opensc

EPSS

Процентиль: 49%
0.00692
Низкий

6.6 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-119