Lucene search
K

5150 matches found

OSV
OSV
added 2018/09/04 12:29 a.m.20 views

CVE-2018-16426

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

4.3CVSS6.5AI score
Exploits0References5
OSV
OSV
added 2018/09/04 12:29 a.m.0 views

UBUNTU-CVE-2018-16426

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

4.3CVSS6.4AI score0.00204EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2018/09/04 12:29 a.m.26 views

CVE-2018-16426

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

4.3CVSS6.6AI score0.00204EPSS
Exploits1References3
Prion
Prion
added 2018/09/04 12:29 a.m.23 views

Code injection

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

2.1CVSS5.1AI score0.00204EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2018/09/04 12:0 a.m.124 views

CVE-2018-16426

OpenSC is affected by CVE-2018-16426 through the IAS-ECC handling path. The issue is an endless recursion in iasecc_select_file within libopensc/card-iasecc.c when processing responses from IAS-ECC cards, and it can be triggered by supplying crafted smartcards. The vulnerability could cause the o...

4.3CVSS5AI score0.00204EPSS
Exploits1References5Affected Software1
AlpineLinux
AlpineLinux
added 2018/09/04 12:0 a.m.40 views

CVE-2018-16426

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

4.3CVSS5.3AI score0.00204EPSS
Exploits1
Cvelist
Cvelist
added 2018/09/04 12:0 a.m.24 views

CVE-2018-16426

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

5.1AI score0.00204EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2018/09/04 12:0 a.m.25 views

CVE-2018-16426

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

4.3CVSS5.6AI score0.00204EPSS
Exploits1
CNVD
CNVD
added 2018/09/04 12:0 a.m.1 views

OpenSC Infinite Recursion Vulnerability

OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. An infinite recursion vulnerability exists in iaseccselectfile in libopensc/card-iasecc.c in OpenSC prior to 0.19.0-rc1 when processing responses from IAS-ECC cards. An attack...

4.3CVSS5.7AI score0.00204EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2018/08/28 12:20 p.m.31 views

CVE-2018-15853

An uncontrolled recursion flaw was found in libxkbcommon in the way it parses boolean expressions. A specially crafted file provided to xkbcomp could crash the application...

5.5CVSS4.2AI score0.0007EPSS
Exploits0References1
CNVD
CNVD
added 2018/08/27 12:0 a.m.1 views

xkbcommon infinite recursion vulnerability

xkbcommon is a keyboard key mapping compiler and support library. An infinite recursion vulnerability exists in versions of xkbcommon prior to 0.8.1, which can be exploited by a local attacker to crash an xkbcommon user by submitting a specially crafted keymap file...

5.5CVSS6.2AI score0.0007EPSS
Exploits0References1
NVD
NVD
added 2018/08/25 9:29 p.m.13 views

CVE-2018-15853

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation...

5.5CVSS6.1AI score0.0007EPSS
Exploits0References6
OSV
OSV
added 2018/08/25 9:29 p.m.18 views

CVE-2018-15853

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation...

5.5CVSS6.3AI score
Exploits0References6
OSV
OSV
added 2018/08/25 9:29 p.m.1 views

DEBIAN-CVE-2018-15853

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation...

5.5CVSS6.1AI score0.0007EPSS
Exploits0References1
Prion
Prion
added 2018/08/25 9:29 p.m.19 views

Information disclosure

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation...

2.1CVSS6AI score0.0007EPSS
Exploits0References6Affected Software3
Cvelist
Cvelist
added 2018/08/25 9:0 p.m.20 views

CVE-2018-15853

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation...

6.1AI score0.0007EPSS
Exploits0References6
AlpineLinux
AlpineLinux
added 2018/08/25 9:0 p.m.1 views

CVE-2018-15853

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation...

5.5CVSS6AI score0.0007EPSS
Exploits0
CVE
CVE
added 2018/08/25 9:0 p.m.124 views

CVE-2018-15853

CVE-2018-15853 – xkbcommon/xkbcomp crash due to endless recursion . A vulnerability in libxkbcommon (and xkbcomp) before 0.8.1 allows a local attacker to crash a user via a specially crafted keymap file that triggers boolean negation in xkbcomp/expr.c. The issue is a local denial of service with ...

5.5CVSS5.9AI score0.0007EPSS
Exploits0References6Affected Software2
Debian CVE
Debian CVE
added 2018/08/25 9:0 p.m.20 views

CVE-2018-15853

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation...

5.5CVSS6.3AI score0.0007EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2018/08/25 12:0 a.m.16 views

CVE-2018-15853

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation...

5.5CVSS6.7AI score0.0007EPSS
Exploits0References4
Rows per page
Query Builder