CVE-2018-16426: Uncontrolled Recursion

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

CVE-2018-16421: Improper Restriction of Operations within the Bounds of a Memory Buffer

Several buffer overflows when handling responses from a CAC Card in cacgetserialnrfromCUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16425

A double free when handling responses from an HSM Card in scpkcs15emuschsminit in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16427

Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-07206)

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'tcosselectfile' function in the libopensc/card-tcos.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker can exploit this vulnerability to cause a denial of service application crash...

CVE-2018-16419

OpenSC before 0.19.0-rc1 is affected by buffer overflow flaws in read_public_key for Cryptoflex card responses. Exploitation requires crafted smartcards and can lead to a denial of service (application crash) and potentially other impact. Affected component: tools/cryptoflex-tool.c; vulnerable ve...

CVE-2018-16425

Summary: CVE-2018-16425 is a double-free vulnerability in OpenSC before 0.19.0-rc1, triggered while handling responses from an HSM Card via sc_pkcs15emu_sc_hsm_init. The issue can be exploited by supplying crafted smartcards and may cause an application crash (DoS) or potentially other impacts. A...

CVE-2018-16422

A single byte buffer overflow when handling responses from an esteid Card in scpkcs15emuesteidinit in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified othe...

CVE-2018-16426

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

CVE-2018-16421

Several buffer overflows when handling responses from a CAC Card in cacgetserialnrfromCUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16424: Double Free

A double free when handling responses in readfile in tools/egk-tool.c aka the eGK card tool in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

OpenSC Double Release Vulnerability (CNVD-2019-28620)

OpenSC is an open source smart card tool and middleware. A double-release vulnerability exists in the 'scfilesetsecattr' function of the libopensc/sc.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker could exploit this vulnerability to cause a denial of service application crash with...

OpenSC Double Release Vulnerability (CNVD-2019-28619)

OpenSC is an open source smart card tool and middleware. A double-release vulnerability exists in the 'readfile' function of the tools/egk-tool.c file in versions prior to OpenSC 0.19.0-rc1. An attacker can exploit this vulnerability to cause a denial of service application crash with the help of...

OpenSC Buffer Overflow Vulnerability (CNVD-2019-28623)

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'decryptresponse' function of the libopensc/card-epass2003.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker could exploit this vulnerability to cause a denial of service application...

OpenSC Out-of-Bounds Read Vulnerability

OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. OpenSC prior to 0.19.0-rc1 suffers from an out-of-bounds read vulnerability when processing responses. An attacker could exploit this vulnerability to cause the opensc library...

CVE-2018-16418

CVE-2018-16418 describes a buffer overflow in OpenSC’s util_acl_to_str() (tools/util.c) when handling string concatenation, triggered by crafted smartcards. Affected versions are OpenSC before 0.19.0-rc1. Exploitation could cause a denial of service (application crash) and potentially other impac...

CVE-2018-16424

CVE-2018-16424 affects OpenSC: a double-free during handling of responses in read_file within tools/egk-tool.c (the eGK card tool). Vulnerable in OpenSC builds before 0.19.0-rc1, potentially enabling denial of service (application crash) or unspecified impact when crafted smartcards are processed...

CVE-2018-16427

OpenSC version before 0.19.0-rc1 is affected by CVE-2018-16427, an out-of-bounds read in handling responses from smart cards which can crash the opensc library when a crafted card is provided. This is part of a family of closely related CVEs (e.g., CVE-2018-16391…16427) mitigated by upgrading to ...

CVE-2018-16422: Improper Restriction of Operations within the Bounds of a Memory Buffer

A single byte buffer overflow when handling responses from an esteid Card in scpkcs15emuesteidinit in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified othe...

CVE-2018-16421

Several buffer overflows when handling responses from a CAC Card in cacgetserialnrfromCUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...