Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

Mageia 6: 2019-0019 Moderate: OpenSC Buffer Overflow Threat

mageia
Calendar Grey January 8, 2019
Dist Mageia Esm H88
Revised OpenSC versions fix essential security vulnerabilities in Mageia 6 that impact smartcard functionality and avert system failures.
Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to s...

Summary

Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact (CVE-2018-16391).
Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact (CVE-2018-16392).
Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact (CVE-2018-16393).
A buffer overflow when handling string conc...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=23447

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FELOINZJEHXTJ757WSU4HYL5HWENARJH/

- https://www.cve.org/CVERecord?id=CVE-2018-16391

- https://www.cve.org/CVERecord?id=CVE-2018-16392

- https://www.cve.org/CVERecord?id=CVE-2018-16393

- https://www.cve.org/CVERecord?id=CVE-2018-16418

- https://www.cve.org/CVERecord?id=CVE-2018-16419

- https://www.cve.org/CVERecord?id=CVE-2018-16420

- https://www.cve.org/CVERecord?id=CVE-2018-16421

- https://www.cve.org/CVERecord?id=CVE-2018-16422

- https://www.cve.org/CVERecord?id=CVE-2018-16423

- https://www.cve.org/CVERecord?id=CVE-2018-16424

- https://www.cve.org/CVERecord?id=CVE-2018-16425

- https://www.cve.org/CVERecord?id=CVE-2018-16426

- https://www.cve.org/CVERecord?id=CVE-2018-16427

Topics%20covered

Topics Covered

security advisory security issue buffer overflow DoS smartcard OpenSC Mageia

Resolution

SRPMS

- 6/core/opensc-0.19.0-1.mga6

Publication date: 08 Jan 2019
URL: https://advisories.mageia.org/MGASA-2019-0019.html
Type: security
CVE: CVE-2018-16391, CVE-2018-16392, CVE-2018-16393, CVE-2018-16418, CVE-2018-16419, CVE-2018-16420, CVE-2018-16421, CVE-2018-16422, CVE-2018-16423, CVE-2018-16424, CVE-2018-16425, CVE-2018-16426, CVE-2018-16427

Topics%20covered

Topics Covered

security advisory security issue buffer overflow DoS smartcard OpenSC Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here