Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-16419

Опубликовано: 04 сент. 2018
Источник: ubuntu
Приоритет: medium
CVSS2: 4.6
CVSS3: 6.6

Описание

Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

not-affected

0.19.0-1build1
disco

not-affected

0.19.0-1build1
eoan

not-affected

0.19.0-1build1
esm-apps/bionic

needed

esm-apps/focal

not-affected

0.19.0-1build1
esm-apps/jammy

not-affected

0.19.0-1build1
esm-apps/noble

not-affected

0.19.0-1build1
esm-apps/xenial

needed

Показывать по

4.6 Medium

CVSS2

6.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
больше 7 лет назад

Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 6.6
nvd
больше 7 лет назад

Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 6.6
debian
больше 7 лет назад

Several buffer overflows when handling responses from a Cryptoflex car ...

CVSS3: 6.6
github
больше 3 лет назад

Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

suse-cvrf
больше 7 лет назад

Security update for opensc

4.6 Medium

CVSS2

6.6 Medium

CVSS3