Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-16393

Опубликовано: 03 сент. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.6
CVSS3: 6.8

Описание

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

not-affected

0.19.0-1build1
disco

not-affected

0.19.0-1build1
eoan

not-affected

0.19.0-1build1
esm-apps/bionic

needed

esm-apps/focal

not-affected

0.19.0-1build1
esm-apps/jammy

not-affected

0.19.0-1build1
esm-apps/noble

not-affected

0.19.0-1build1
esm-apps/xenial

needed

Показывать по

EPSS

Процентиль: 35%
0.00144
Низкий

4.6 Medium

CVSS2

6.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
больше 7 лет назад

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 6.8
nvd
больше 7 лет назад

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 6.8
debian
больше 7 лет назад

Several buffer overflows when handling responses from a Gemsafe V1 Sma ...

CVSS3: 6.8
github
больше 3 лет назад

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

suse-cvrf
больше 7 лет назад

Security update for opensc

EPSS

Процентиль: 35%
0.00144
Низкий

4.6 Medium

CVSS2

6.8 Medium

CVSS3