Buffer Overflow Vulnerability in OpenSC Affects String Handling
CVE-2018-16418

6.6MEDIUM

Key Information:

Vendor

Opensc Project

Status
Opensc
Vendor
CVE Published:
4 September 2018

What is CVE-2018-16418?

A buffer overflow issue has been identified in OpenSC, specifically in the util_acl_to_str function located in tools/util.c. This vulnerability occurs during string concatenation and can be exploited by attackers who provide specially crafted smartcards. The exploitation could result in a denial of service by causing the application to crash, and there may also be potential for additional undisclosed impacts.

References

https://github.com/OpenSC/OpenSC/commit/360e95d45ac412325...
x_refsource_MISC
https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1
x_refsource_MISC
https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/
x_refsource_MISC

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.