CVE-2018-16427: Medium severity suse opensc vulnerability
Published Sep 4, 2018
·Updated
Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs.
Affected Software
2 affected componentsFixes available
redhat/opensc<0.19.0
0.19.0
Opensc Project Opensc<=0.18.0
Remediation
Patch Available
Event History
Sep 4, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2018-16427?
CVE-2018-16427 is a vulnerability in OpenSC before version 0.19.0-rc1 that could allow attackers to crash the opensc library by supplying crafted smartcards.
2
What is the severity of CVE-2018-16427?
CVE-2018-16427 is classified as medium severity with a CVSS score of 4.3.
3
How can CVE-2018-16427 be exploited?
CVE-2018-16427 can be exploited by attackers who are able to supply crafted smartcards to the OpenSC library.
4
Which versions of OpenSC are affected by CVE-2018-16427?
OpenSC versions up to and including 0.18.0 are affected by CVE-2018-16427.
5
How can CVE-2018-16427 be fixed?
To fix CVE-2018-16427, users should update to version 0.19.0 or later of OpenSC.