CVE-2018-16392: Buffer Overflow
Several buffer overflows when handling responses from a TCOS Card in tcosselectfile in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-16392?
CVE-2018-16392 is a vulnerability in OpenSC before version 0.19.0-rc1 that allows attackers to cause a denial of service or potentially have other impacts by supplying crafted smartcards.
How does CVE-2018-16392 affect OpenSC?
CVE-2018-16392 affects OpenSC versions before 0.19.0-rc1.
What is the severity of CVE-2018-16392?
The severity of CVE-2018-16392 is medium with a CVSS score of 6.8.
How can the CVE-2018-16392 vulnerability be fixed?
To fix the CVE-2018-16392 vulnerability, upgrade to OpenSC version 0.19.0 or later.
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-16392?
The Common Weakness Enumeration (CWE) ID for CVE-2018-16392 is CWE-119.