Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-16058

Опубликовано: 06 сент. 2019
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the signature scheme.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:opensc_project:opensc:0.2.0:*:*:*:*:*:*:*
cpe:2.3:a:opensc_project:opensc:0.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 57%
0.00354
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 6 лет назад

An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the signature scheme.

CVSS3: 7.5
debian
больше 6 лет назад

An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for O ...

CVSS3: 7.5
github
больше 3 лет назад

An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the signature scheme.

EPSS

Процентиль: 57%
0.00354
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119