Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

SUSE Linux Enterprise 12-SP3: 2018:3622-1 Moderate: OpenSC Security Fixes

suse
Calendar Grey November 5, 2018
Dist Suse Esm H88
SUSE Security Update addresses several vulnerabilities in libssh with a high severity rating, providing comprehensive remediation guidelines.
An update that solves 10 vulnerabilities and has one errata is now available

Summary

This update for opensc fixes the following issues: - CVE-2018-16391: Fixed a denial of service when handling responses from a Muscle Card (bsc#1106998) - CVE-2018-16392: Fixed a denial of service when handling responses from a TCOS Card (bsc#1106999) - CVE-2018-16393: Fixed buffer overflows when handling responses from Gemsafe V1 Smartcards (bsc#1108318) - CVE-2018-16418: Fixed buffer overflow when handling string concatenation in util_acl_to_str (bsc#1107039) - CVE-2018-16419: Fixed several buffer overflows when handling responses from a Cryptoflex card (bsc#1107107) - CVE-2018-16420: Fixed buffer overflows when handling responses from an ePass 2003 Card (bsc#1107097) - CVE-2018-16422: Fixed single byte buffer overflow when handling responses from an esteid Card (bsc#1107038)

Topics%20covered

Topics Covered

security advisory moderate denial of service buffer overflow opensc SUSE Linux Enterprise

References

#1104812 #1106998 #1106999 #1107033 #1107034

#1107037 #1107038 #1107039 #1107097 #1107107

#1108318

Cross- CVE-2018-16391 CVE-2018-16392 CVE-2018-16393

CVE-2018-16418 CVE-2018-16419 CVE-2018-16420

CVE-2018-16422 CVE-2018-16423 CVE-2018-16426

CVE-2018-16427

Affected Products:

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Desktop 12-SP3

https://www.suse.com/security/cve/CVE-2018-16391.html

https://www.suse.com/security/cve/CVE-2018-16392.html

https://www.suse.com/security/cve/CVE-2018-16393.html

https://www.suse.com/security/cve/CVE-2018-16418.html

https://www.suse.com/security/cve/CVE-2018-16419.html

https://www.suse.com/security/cve/CVE-2018-16420.html

https://www.suse.com/security/cve/CVE-2018-16422.html

Announcement ID: SUSE-SU-2018:3622-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service buffer overflow opensc SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.