Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-16425

Опубликовано: 04 сент. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.6
CVSS3: 6.6

Описание

A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

not-affected

0.19.0~rc1-1
disco

not-affected

0.19.0~rc1-1
eoan

not-affected

0.19.0~rc1-1
esm-apps/bionic

needed

esm-apps/focal

not-affected

0.19.0~rc1-1
esm-apps/jammy

not-affected

0.19.0~rc1-1
esm-apps/noble

not-affected

0.19.0~rc1-1
esm-apps/xenial

needed

Показывать по

EPSS

Процентиль: 39%
0.0017
Низкий

4.6 Medium

CVSS2

6.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
больше 7 лет назад

A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 6.6
nvd
больше 7 лет назад

A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS3: 6.6
debian
больше 7 лет назад

A double free when handling responses from an HSM Card in sc_pkcs15emu ...

CVSS3: 6.6
github
больше 3 лет назад

A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

suse-cvrf
около 7 лет назад

Security update for opensc

EPSS

Процентиль: 39%
0.0017
Низкий

4.6 Medium

CVSS2

6.6 Medium

CVSS3

Уязвимость CVE-2018-16425