CVE-2018-16393: Buffer Overflow
Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-16393?
CVE-2018-16393 is a vulnerability that involves several buffer overflows when handling responses from a Gemsafe V1 Smartcard in OpenSC before version 0.19.0-rc1.
How can this vulnerability be exploited?
Attackers can exploit this vulnerability by supplying crafted smartcards, which could cause a denial of service (application crash) or potentially have unspecified impacts.
What is the severity of CVE-2018-16393?
The severity of CVE-2018-16393 is medium, with a score of 6.8.
How do I fix CVE-2018-16393?
To fix CVE-2018-16393, you should update to OpenSC version 0.19.0 or later.
Where can I find more information about CVE-2018-16393?
You can find more information about CVE-2018-16393 in the Red Hat advisory (RHSA-2019:2154) and the OpenSC release notes.