CVE-2018-16418

A buffer overflow when handling string concatenation in utilacltostr in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16424

A double free when handling responses in readfile in tools/egk-tool.c aka the eGK card tool in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16422

A single byte buffer overflow when handling responses from an esteid Card in scpkcs15emuesteidinit in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified othe...

CVE-2018-16421

Several buffer overflows when handling responses from a CAC Card in cacgetserialnrfromCUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16425

Summary: CVE-2018-16425 is a double-free vulnerability in OpenSC before 0.19.0-rc1, triggered while handling responses from an HSM Card via sc_pkcs15emu_sc_hsm_init. The issue can be exploited by supplying crafted smartcards and may cause an application crash (DoS) or potentially other impacts. A...

OpenSC Double Release Vulnerability

OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. A double-release vulnerability exists in scpkcs15emuschsminit in libopensc/pkcs15-sc-hsm.c in OpenSC prior to 0.19.0-rc1 when handling responses from HSM cards. An attacker...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-28622)

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'cacgetserialnrfromCUID' function in the libopensc/card-cac.c file in versions prior to OpenSC 0.19.0-rc1. An attacker could use this vulnerability to cause a denial of service application crash...

OpenSC Double Release Vulnerability (CNVD-2019-28620)

OpenSC is an open source smart card tool and middleware. A double-release vulnerability exists in the 'scfilesetsecattr' function of the libopensc/sc.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker could exploit this vulnerability to cause a denial of service application crash with...

CVE-2018-16423

OpenSC contains a vulnerability CVE-2018-16423: a double-free in sc_file_set_sec_attr() of libopensc/sc.c when handling smartcard responses. Affected product/version: OpenSC before 0.19.0-rc1. Impact: potential denial of service (application crash) and possibly other unspecified effects if a craf...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-28616)

OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. A buffer overflow vulnerability exists in utilacltostr in tools/util.c in OpenSC before 0.19.0-rc1 when handling string concatenation. An attacker could exploit this...

CVE-2018-16421

CVE-2018-16421 affects the OpenSC project, specifically a buffer overflow in libopensc/card-cac.c (cac_get_serial_nr_from_CUID) when processing CAC card responses, on OpenSC versions prior to 0.19.0-rc1. This vulnerability could allow a crafted smartcard attacker to cause a denial of service (app...

CVE-2018-16418

CVE-2018-16418 describes a buffer overflow in OpenSC’s util_acl_to_str() (tools/util.c) when handling string concatenation, triggered by crafted smartcards. Affected versions are OpenSC before 0.19.0-rc1. Exploitation could cause a denial of service (application crash) and potentially other impac...

CVE-2018-16422

OpenSC (opensc) vulnerable to a single-byte buffer overflow in sc_pkcs15emu_esteid_init when processing responses from Esteid cards, affecting versions before 0.19.0-rc1. Exploitation could crash the application or cause unspecified impact; remediation is to upgrade to OpenSC 0.19.0 or later wher...

OpenSC Buffer Overflow Vulnerability

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'scpkcs15emuesteidinit' function in the libopensc/pkcs15-esteid.c file in versions prior to OpenSC 0.19.0-rc1. An attacker could use this vulnerability to cause a denial of service application...

OpenSC Infinite Recursion Vulnerability

OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. An infinite recursion vulnerability exists in iaseccselectfile in libopensc/card-iasecc.c in OpenSC prior to 0.19.0-rc1 when processing responses from IAS-ECC cards. An attack...

CVE-2018-16425

A double free when handling responses from an HSM Card in scpkcs15emuschsminit in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16426

OpenSC is affected by CVE-2018-16426 through the IAS-ECC handling path. The issue is an endless recursion in iasecc_select_file within libopensc/card-iasecc.c when processing responses from IAS-ECC cards, and it can be triggered by supplying crafted smartcards. The vulnerability could cause the o...

CVE-2018-16424

CVE-2018-16424 affects OpenSC: a double-free during handling of responses in read_file within tools/egk-tool.c (the eGK card tool). Vulnerable in OpenSC builds before 0.19.0-rc1, potentially enabling denial of service (application crash) or unspecified impact when crafted smartcards are processed...

OpenSC Double Release Vulnerability (CNVD-2019-28619)

OpenSC is an open source smart card tool and middleware. A double-release vulnerability exists in the 'readfile' function of the tools/egk-tool.c file in versions prior to OpenSC 0.19.0-rc1. An attacker can exploit this vulnerability to cause a denial of service application crash with the help of...

OpenSC Out-of-Bounds Read Vulnerability

OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. OpenSC prior to 0.19.0-rc1 suffers from an out-of-bounds read vulnerability when processing responses. An attacker could exploit this vulnerability to cause the opensc library...