CVE-2018-16421: Buffer Overflow
Several buffer overflows when handling responses from a CAC Card in cacgetserialnrfromCUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/openscto a version that resolves this vulnerability.Fixed in 0.19.0 - Upgrade
Upgrade
alpine/openscto a version that resolves this vulnerability.Fixed in 0.19.0-r0 - Upgrade
Upgrade
OpenSCto a version that resolves this vulnerability.Fixed in 0.19.0-rc1
Event History
Frequently Asked Questions
What is CVE-2018-16421?
CVE-2018-16421 is a vulnerability that allows attackers to cause a denial of service (application crash) or possibly have other unspecified impact by exploiting buffer overflows when handling responses from a CAC Card in OpenSC before version 0.19.0-rc1.
How severe is CVE-2018-16421?
CVE-2018-16421 has a severity score of 6.6 (medium).
Which software versions are affected by CVE-2018-16421?
OpenSC versions up to and including 0.18.0 and Red Hat OpenSC versions up to but excluding 0.19.0 are affected by CVE-2018-16421.
How can I fix CVE-2018-16421?
To fix CVE-2018-16421, update OpenSC to version 0.19.0 or later, or update Red Hat OpenSC to version 0.19.0 or later.
What is CWE-119?
CWE-119 is a common weakness enumeration category for buffer errors, such as buffer overflows, which is associated with CVE-2018-16421.