Lucene search
+L

118 matches found

Prion
Prion
added 2018/04/18 2:29 p.m.21 views

Buffer overflow

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD...

10CVSS8.7AI score0.01405EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2017/08/01 9:17 p.m.5 views

Qemu: libcacard: host memory leakage while creating new APDU

Memory leak in the vcardapdunew function in card7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service host memory consumption via vectors related to allocating a new APDU object...

6.5CVSS5.8AI score0.00444EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2017/04/20 12:0 a.m.35 views

SUSE SLES11 Security Update : xen (SUSE-SU-2017:1058-1)

This update for xen fixes the following security issues : - CVE-2017-7228: Broken check in memoryexchange permited PV guest breakout bsc1030442. - CVE-2017-6414: Memory leak in the vcardapdunew function in card7816.c in libcacard allowed local guest OS users to cause a denial of service host memo...

8.2CVSS6.7AI score0.01569EPSS
Exploits2References10
BDU FSTEC
BDU FSTEC
added 2017/03/23 12:0 a.m.7 views

The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure

The vulnerability of the emulatedapdufromguest function in the usb/dev-smartcard-reader.c file of the QEMU hardware emulation software, which supports emulation of CCID Card devices, is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker, operating locally, to...

2.1CVSS6.9AI score0.004EPSS
Exploits0References8
Prion
Prion
added 2017/03/15 7:59 p.m.32 views

Integer overflow

Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator Qemu, when built with the CCID Card device emulator support, allows local users to cause a denial of service application crash via a large Application Protocol Data Units APDU unit...

2.1CVSS5.6AI score0.004EPSS
Exploits0References9Affected Software5
OSV
OSV
added 2017/03/15 7:59 p.m.3 views

ALPINE-CVE-2017-5898

Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator Qemu, when built with the CCID Card device emulator support, allows local users to cause a denial of service application crash via a large Application Protocol Data Units APDU unit...

5.5CVSS6.6AI score0.004EPSS
Exploits0References1
OSV
OSV
added 2017/03/15 7:59 p.m.1 views

DEBIAN-CVE-2017-5898

Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator Qemu, when built with the CCID Card device emulator support, allows local users to cause a denial of service application crash via a large Application Protocol Data Units APDU unit...

5.5CVSS8.7AI score0.004EPSS
Exploits0References1
Cvelist
Cvelist
added 2017/03/15 7:0 p.m.27 views

CVE-2017-5898

Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator Qemu, when built with the CCID Card device emulator support, allows local users to cause a denial of service application crash via a large Application Protocol Data Units APDU unit...

5.8AI score0.004EPSS
Exploits0References9
Debian CVE
Debian CVE
added 2017/03/15 7:0 p.m.37 views

CVE-2017-5898

Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator Qemu, when built with the CCID Card device emulator support, allows local users to cause a denial of service application crash via a large Application Protocol Data Units APDU unit...

5.5CVSS7.4AI score0.004EPSS
Exploits0
CVE
CVE
added 2017/03/15 7:0 p.m.147 views

CVE-2017-5898

CVE-2017-5898 affects Quick Emulator (QEMU) when built with CCID Card device emulator support. The vulnerability is an integer overflow in the emulated_apdu_from_guest function (usb/dev-smartcard-reader.c) that allows a local user to crash the QEMU host process by sending a large APDU unit, causi...

5.5CVSS5.7AI score0.004EPSS
Exploits0References9Affected Software1
Prion
Prion
added 2017/03/15 2:59 p.m.26 views

Memory corruption

Memory leak in the vcardapdunew function in card7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service host memory consumption via vectors related to allocating a new APDU object...

4.9CVSS6AI score0.00444EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2017/03/15 2:59 p.m.30 views

CVE-2017-6414

Memory leak in the vcardapdunew function in card7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service host memory consumption via vectors related to allocating a new APDU object...

6.5CVSS6.2AI score
Exploits0References6
OSV
OSV
added 2017/03/15 2:59 p.m.7 views

UBUNTU-CVE-2017-6414

Memory leak in the vcardapdunew function in card7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service host memory consumption via vectors related to allocating a new APDU object...

6.5CVSS6.9AI score0.00444EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2017/03/15 2:0 p.m.56 views

CVE-2017-6414

Memory leak in the vcardapdunew function in card7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service host memory consumption via vectors related to allocating a new APDU object...

6.5CVSS7.3AI score0.00444EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2017/03/15 12:0 a.m.29 views

CVE-2017-5898

Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator Qemu, when built with the CCID Card device emulator support, allows local users to cause a denial of service application crash via a large Application Protocol Data Units APDU unit...

5.5CVSS6.9AI score0.004EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2009/04/15 12:0 a.m.19 views

Mandrake Security Advisory MDVSA-2009:089 (opensc)

The remote host is missing an update to opensc announced via advisory MDVSA-2009:089. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

2.1CVSS7.5AI score0.01215EPSS
Exploits1References1
Prion
Prion
added 2009/03/02 10:30 p.m.14 views

Code injection

OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a 1 low level APDU command or 2 debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program...

2.1CVSS6.9AI score0.01215EPSS
Exploits1References15Affected Software1
Cvelist
Cvelist
added 2009/03/02 10:0 p.m.50 views

CVE-2009-0368

OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a 1 low level APDU command or 2 debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program...

7.4AI score0.01215EPSS
Exploits1References15
Rows per page
Query Builder