CVE-2018-16391: Buffer Overflow
Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-16391.
What is the severity rating of CVE-2018-16391?
CVE-2018-16391 has a severity rating of medium.
What software is affected by CVE-2018-16391?
The software affected by CVE-2018-16391 is OpenSC versions up to and including 0.18.0 and redhat/opensc versions up to exclusive 0.19.0.
How can this vulnerability be exploited?
This vulnerability can be exploited by attackers who can supply crafted smartcards to cause a denial of service or possibly have other unspecified impact.
How can I fix CVE-2018-16391?
To fix CVE-2018-16391, update to OpenSC version 0.19.0 or higher.