CVE-2018-16421

Several buffer overflows when handling responses from a CAC Card in cacgetserialnrfromCUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16425

A double free when handling responses from an HSM Card in scpkcs15emuschsminit in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16419

Several buffer overflows when handling responses from a Cryptoflex card in readpublickey in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16426

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

CVE-2018-16419

Several buffer overflows when handling responses from a Cryptoflex card in readpublickey in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-28624)

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'readpublickey' function in the tools/cryptoflex-tool.c file in versions prior to OpenSC 0.19.0-rc1. An attacker could use this vulnerability to cause a denial of service application crash with...

CVE-2018-16420

CVE-2018-16420: OpenSC has buffer overflows in decrypt_response (libopensc/card-epass2003.c) when processing responses from ePass 2003 cards. Affected: OpenSC before 0.19.0-rc1. Exploitation requires crafted smartcards and could cause a denial of service (application crash) or other impact. Remed...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-28616)

OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. A buffer overflow vulnerability exists in utilacltostr in tools/util.c in OpenSC before 0.19.0-rc1 when handling string concatenation. An attacker could exploit this...

OpenSC Buffer Overflow Vulnerability

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'scpkcs15emuesteidinit' function in the libopensc/pkcs15-esteid.c file in versions prior to OpenSC 0.19.0-rc1. An attacker could use this vulnerability to cause a denial of service application...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-07204)

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'musclelistfiles' function of the libopensc/card-muscle.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker can exploit this vulnerability to cause a denial of service application cras...

CVE-2018-16424

A double free when handling responses in readfile in tools/egk-tool.c aka the eGK card tool in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16419

Several buffer overflows when handling responses from a Cryptoflex card in readpublickey in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16420

Several buffer overflows when handling responses from an ePass 2003 Card in decryptresponse in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impa...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 69 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 69.0.3497.81 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-07206)

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'tcosselectfile' function in the libopensc/card-tcos.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker can exploit this vulnerability to cause a denial of service application crash...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-28623)

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'decryptresponse' function of the libopensc/card-epass2003.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker could exploit this vulnerability to cause a denial of service application...

OpenSC Double Release Vulnerability (CNVD-2019-28620)

OpenSC is an open source smart card tool and middleware. A double-release vulnerability exists in the 'scfilesetsecattr' function of the libopensc/sc.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker could exploit this vulnerability to cause a denial of service application crash with...

CVE-2018-16419

OpenSC before 0.19.0-rc1 is affected by buffer overflow flaws in read_public_key for Cryptoflex card responses. Exploitation requires crafted smartcards and can lead to a denial of service (application crash) and potentially other impact. Affected component: tools/cryptoflex-tool.c; vulnerable ve...

KLA11312 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions and spoof user interface. Below is a complete list of vulnerabilities: 1. ...

CVE-2018-16426

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...