Lucene search
+L

33 matches found

Veracode
Veracode
added 2019/08/08 12:07 a.m.21 views

Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c...

6.8CVSS2.7AI score0.00645EPSS
SaveExploits1References9Affected Software1
RedHat Linux
RedHat Linux
added 2019/08/06 12:30 p.m.8 views

opensc: Buffer overflows handling responses from TCOS Cards in card-tcos.c:tcos_select_file()

Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

6.8CVSS6AI score0.00645EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2019/01/02 12:00 a.m.36 views

SUSE SLED15 / SLES15 Security Update : opensc (SUSE-SU-2018:3629-1)

This update for opensc fixes the following security issues : CVE-2018-16391: Fixed a denial of service when handling responses from a Muscle Card bsc1106998 CVE-2018-16392: Fixed a denial of service when handling responses from a TCOS Card bsc1106999 CVE-2018-16393: Fixed buffer overflows when...

6.8CVSS6.2AI score0.00692EPSS
SaveExploits12References41
OPENSUSE Linux
OPENSUSE Linux
added 2018/11/10 12:17 a.m.546 views

Security update for opensc (moderate)

This update for opensc fixes the following issues: - CVE-2018-16391: Fixed a denial of service when handling responses from a Muscle Card bsc1106998 - CVE-2018-16392: Fixed a denial of service when handling responses from a TCOS Card bsc1106999 - CVE-2018-16393: Fixed buffer overflows when handli...

4.6CVSS0.9AI score0.00692EPSS
SaveExploits9References11
OpenVAS
OpenVAS
added 2018/11/10 12:00 a.m.47 views

openSUSE: Security Advisory for opensc (openSUSE-SU-2018:3716-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.8CVSS6.4AI score0.00692EPSS
SaveExploits12References2
RedhatCVE
RedhatCVE
added 2018/09/12 5:50 a.m.14 views

CVE-2018-16392

Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

6.8CVSS4.8AI score0.00645EPSS
SaveExploits1References2
CNVD
CNVD
added 2018/09/04 12:00 a.m.5 views

OpenSC Buffer Overflow Vulnerability (CNVD-2019-07205)

OpenSC is an open source smart card tool and middleware. A buffer overflow vulnerability exists in the 'tcosselectfile' function in the libopensc/card-tcos.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker can exploit this vulnerability to cause a denial of service application crash...

6.8CVSS6.6AI score0.00645EPSS
SaveExploits1References1
OSV
OSV
added 2018/09/03 2:29 p.m.14 views

UBUNTU-CVE-2018-16392

Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

6.8CVSS6.6AI score0.00645EPSS
SaveExploits1References4
NVD
NVD
added 2018/09/03 2:29 p.m.13 views

CVE-2018-16392

Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

6.8CVSS7AI score0.00645EPSS
SaveExploits1References5
OSV
OSV
added 2018/09/03 2:29 p.m.3 views

DEBIAN-CVE-2018-16392

Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

6.8CVSS7.4AI score0.00645EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2018/09/03 2:00 p.m.18 views

CVE-2018-16392

Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

6.8CVSS7.4AI score0.00645EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2018/09/03 2:00 p.m.25 views

CVE-2018-16392

Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

6.8CVSS7AI score0.00645EPSS
SaveExploits1
CVE
CVE
added 2018/09/03 2:00 p.m.110 views

CVE-2018-16392

OpenSC vulnerability CVE-2018-16392 affects the TCOS Card handling path. Affected component: libopensc/card-tcos.c, function tcos_select_file, in OpenSC before 0.19.0-rc1. Description: several buffer overflows could be triggered by crafted smartcards, leading to denial of service (application cra...

6.8CVSS6.8AI score0.00645EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder