csaf_redhat - rhsa-2019

rhsa-2019_2154

Vulnerability from csaf_redhat

Published

2019-08-06 12:30

Modified

2024-11-22 12:43

Summary

Red Hat Security Advisory: opensc security, bug fix, and enhancement update

Notes

Topic

An update for opensc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures. The following packages have been upgraded to a later upstream version: opensc (0.19.0). (BZ#1656791) Security Fix(es): * opensc: Buffer overflows handling responses from Muscle Cards in card-muscle.c:muscle_list_files() (CVE-2018-16391) * opensc: Buffer overflows handling responses from TCOS Cards in card-tcos.c:tcos_select_file() (CVE-2018-16392) * opensc: Buffer overflows handling responses from Gemsafe V1 Smartcards in pkcs15-gemsafeV1.c:gemsafe_get_cert_len() (CVE-2018-16393) * opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str() (CVE-2018-16418) * opensc: Buffer overflow handling responses from Cryptoflex cards in cryptoflex-tool.c:read_public_key() (CVE-2018-16419) * opensc: Buffer overflows handling responses from ePass 2003 Cards in card-epass2003.c:decrypt_response() (CVE-2018-16420) * opensc: Buffer overflows handling responses from CAC Cards in card-cac.c:cac_get_serial_nr_from_CUID() (CVE-2018-16421) * opensc: Buffer overflow handling responses from esteid cards in pkcs15-esteid.c:sc_pkcs15emu_esteid_init() (CVE-2018-16422) * opensc: Double free handling responses from smartcards in libopensc/sc.c:sc_file_set_sec_attr() (CVE-2018-16423) * opensc: Out of bounds reads handling responses from smartcards (CVE-2018-16427) * opensc: Infinite recusrion handling responses from IAS-ECC cards in card-iasecc.c:iasecc_select_file() (CVE-2018-16426) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for opensc is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures.\n\nThe following packages have been upgraded to a later upstream version: opensc (0.19.0). (BZ#1656791)\n\nSecurity Fix(es):\n\n* opensc: Buffer overflows handling responses from Muscle Cards in card-muscle.c:muscle_list_files() (CVE-2018-16391)\n\n* opensc: Buffer overflows handling responses from TCOS Cards in card-tcos.c:tcos_select_file() (CVE-2018-16392)\n\n* opensc: Buffer overflows handling responses from Gemsafe V1 Smartcards in pkcs15-gemsafeV1.c:gemsafe_get_cert_len() (CVE-2018-16393)\n\n* opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str() (CVE-2018-16418)\n\n* opensc: Buffer overflow handling responses from Cryptoflex cards in cryptoflex-tool.c:read_public_key() (CVE-2018-16419)\n\n* opensc: Buffer overflows handling responses from ePass 2003 Cards in card-epass2003.c:decrypt_response() (CVE-2018-16420)\n\n* opensc: Buffer overflows handling responses from CAC Cards in card-cac.c:cac_get_serial_nr_from_CUID() (CVE-2018-16421)\n\n* opensc: Buffer overflow handling responses from esteid cards in pkcs15-esteid.c:sc_pkcs15emu_esteid_init() (CVE-2018-16422)\n\n* opensc: Double free handling responses from smartcards in libopensc/sc.c:sc_file_set_sec_attr() (CVE-2018-16423)\n\n* opensc: Out of bounds reads handling responses from smartcards (CVE-2018-16427)\n\n* opensc: Infinite recusrion handling responses from IAS-ECC cards in card-iasecc.c:iasecc_select_file() (CVE-2018-16426)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2154",
        "url": "https://access.redhat.com/errata/RHSA-2019:2154"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index"
      },
      {
        "category": "external",
        "summary": "1627998",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1627998"
      },
      {
        "category": "external",
        "summary": "1628002",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628002"
      },
      {
        "category": "external",
        "summary": "1628006",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628006"
      },
      {
        "category": "external",
        "summary": "1628010",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628010"
      },
      {
        "category": "external",
        "summary": "1628013",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628013"
      },
      {
        "category": "external",
        "summary": "1628016",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628016"
      },
      {
        "category": "external",
        "summary": "1628020",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628020"
      },
      {
        "category": "external",
        "summary": "1628026",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628026"
      },
      {
        "category": "external",
        "summary": "1628034",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628034"
      },
      {
        "category": "external",
        "summary": "1628044",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628044"
      },
      {
        "category": "external",
        "summary": "1628052",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628052"
      },
      {
        "category": "external",
        "summary": "1656791",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1656791"
      },
      {
        "category": "external",
        "summary": "1672898",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672898"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2154.json"
      }
    ],
    "title": "Red Hat Security Advisory: opensc security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2024-11-22T12:43:06+00:00",
      "generator": {
        "date": "2024-11-22T12:43:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2019:2154",
      "initial_release_date": "2019-08-06T12:30:29+00:00",
      "revision_history": [
        {
          "date": "2019-08-06T12:30:29+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-08-06T12:30:29+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T12:43:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Client (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Client (v. 7)",
                  "product_id": "7Client-7.7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
                  "product_id": "7ComputeNode-optional-7.7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-7.7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-7.7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.el7.i686",
                "product": {
                  "name": "opensc-0:0.19.0-3.el7.i686",
                  "product_id": "opensc-0:0.19.0-3.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc@0.19.0-3.el7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-debuginfo-0:0.19.0-3.el7.i686",
                "product": {
                  "name": "opensc-debuginfo-0:0.19.0-3.el7.i686",
                  "product_id": "opensc-debuginfo-0:0.19.0-3.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc-debuginfo@0.19.0-3.el7?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.el7.x86_64",
                "product": {
                  "name": "opensc-0:0.19.0-3.el7.x86_64",
                  "product_id": "opensc-0:0.19.0-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc@0.19.0-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-debuginfo-0:0.19.0-3.el7.x86_64",
                "product": {
                  "name": "opensc-debuginfo-0:0.19.0-3.el7.x86_64",
                  "product_id": "opensc-debuginfo-0:0.19.0-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc-debuginfo@0.19.0-3.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.el7.src",
                "product": {
                  "name": "opensc-0:0.19.0-3.el7.src",
                  "product_id": "opensc-0:0.19.0-3.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc@0.19.0-3.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.el7.s390x",
                "product": {
                  "name": "opensc-0:0.19.0-3.el7.s390x",
                  "product_id": "opensc-0:0.19.0-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc@0.19.0-3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-debuginfo-0:0.19.0-3.el7.s390x",
                "product": {
                  "name": "opensc-debuginfo-0:0.19.0-3.el7.s390x",
                  "product_id": "opensc-debuginfo-0:0.19.0-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc-debuginfo@0.19.0-3.el7?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.el7.ppc64",
                "product": {
                  "name": "opensc-0:0.19.0-3.el7.ppc64",
                  "product_id": "opensc-0:0.19.0-3.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc@0.19.0-3.el7?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64",
                "product": {
                  "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64",
                  "product_id": "opensc-debuginfo-0:0.19.0-3.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc-debuginfo@0.19.0-3.el7?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.el7.ppc",
                "product": {
                  "name": "opensc-0:0.19.0-3.el7.ppc",
                  "product_id": "opensc-0:0.19.0-3.el7.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc@0.19.0-3.el7?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc",
                "product": {
                  "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc",
                  "product_id": "opensc-debuginfo-0:0.19.0-3.el7.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc-debuginfo@0.19.0-3.el7?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.el7.ppc64le",
                "product": {
                  "name": "opensc-0:0.19.0-3.el7.ppc64le",
                  "product_id": "opensc-0:0.19.0-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc@0.19.0-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
                "product": {
                  "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
                  "product_id": "opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/opensc-debuginfo@0.19.0-3.el7?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-0:0.19.0-3.el7.i686"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.i686",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-0:0.19.0-3.el7.ppc"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc64",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc64le",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-0:0.19.0-3.el7.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.s390x",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-0:0.19.0-3.el7.src"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.src",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.x86_64",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.i686",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc64",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.s390x",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.x86_64",
        "relates_to_product_reference": "7Client-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.i686",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc64",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc64le",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.s390x",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.src",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.x86_64",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.i686",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc64",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.s390x",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.x86_64",
        "relates_to_product_reference": "7ComputeNode-optional-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-0:0.19.0-3.el7.i686"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.i686",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-0:0.19.0-3.el7.ppc"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc64",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-0:0.19.0-3.el7.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.s390x",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-0:0.19.0-3.el7.src"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.src",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.x86_64",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.i686",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc64",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.s390x",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.x86_64",
        "relates_to_product_reference": "7Server-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.i686",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc64",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-0:0.19.0-3.el7.src"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.src",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.i686",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc64",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-7.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-debuginfo-0:0.19.0-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        },
        "product_reference": "opensc-debuginfo-0:0.19.0-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-7.7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-16391",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1627998"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "opensc: Buffer overflows handling responses from Muscle Cards in card-muscle.c:muscle_list_files()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-0:0.19.0-3.el7.src",
          "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-0:0.19.0-3.el7.src",
          "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-16391"
        },
        {
          "category": "external",
          "summary": "RHBZ#1627998",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1627998"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-16391",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-16391"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16391",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16391"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        }
      ],
      "release_date": "2018-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-08-06T12:30:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "opensc: Buffer overflows handling responses from Muscle Cards in card-muscle.c:muscle_list_files()"
    },
    {
      "cve": "CVE-2018-16392",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1628002"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "opensc: Buffer overflows handling responses from TCOS Cards in card-tcos.c:tcos_select_file()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-0:0.19.0-3.el7.src",
          "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-0:0.19.0-3.el7.src",
          "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-16392"
        },
        {
          "category": "external",
          "summary": "RHBZ#1628002",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628002"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-16392",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-16392"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16392",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16392"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        }
      ],
      "release_date": "2018-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-08-06T12:30:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "opensc: Buffer overflows handling responses from TCOS Cards in card-tcos.c:tcos_select_file()"
    },
    {
      "cve": "CVE-2018-16393",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1628006"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "opensc: Buffer overflows handling responses from Gemsafe V1 Smartcards in pkcs15-gemsafeV1.c:gemsafe_get_cert_len()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-0:0.19.0-3.el7.src",
          "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-0:0.19.0-3.el7.src",
          "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-16393"
        },
        {
          "category": "external",
          "summary": "RHBZ#1628006",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628006"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-16393",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-16393"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16393",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16393"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        }
      ],
      "release_date": "2018-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-08-06T12:30:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "opensc: Buffer overflows handling responses from Gemsafe V1 Smartcards in pkcs15-gemsafeV1.c:gemsafe_get_cert_len()"
    },
    {
      "cve": "CVE-2018-16418",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1628010"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-0:0.19.0-3.el7.src",
          "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-0:0.19.0-3.el7.src",
          "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-16418"
        },
        {
          "category": "external",
          "summary": "RHBZ#1628010",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628010"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-16418",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-16418"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16418",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16418"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        }
      ],
      "release_date": "2018-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-08-06T12:30:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()"
    },
    {
      "cve": "CVE-2018-16419",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1628013"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "opensc: Buffer overflow handling responses from Cryptoflex cards in cryptoflex-tool.c:read_public_key()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-0:0.19.0-3.el7.src",
          "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-0:0.19.0-3.el7.src",
          "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-16419"
        },
        {
          "category": "external",
          "summary": "RHBZ#1628013",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628013"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-16419",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-16419"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16419",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16419"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        }
      ],
      "release_date": "2018-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-08-06T12:30:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "opensc: Buffer overflow handling responses from Cryptoflex cards in cryptoflex-tool.c:read_public_key()"
    },
    {
      "cve": "CVE-2018-16420",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1628026"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "opensc: Buffer overflows handling responses from ePass 2003 Cards in card-epass2003.c:decrypt_response()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-0:0.19.0-3.el7.src",
          "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-0:0.19.0-3.el7.src",
          "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-16420"
        },
        {
          "category": "external",
          "summary": "RHBZ#1628026",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628026"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-16420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-16420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16420"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        }
      ],
      "release_date": "2018-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-08-06T12:30:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "opensc: Buffer overflows handling responses from ePass 2003 Cards in card-epass2003.c:decrypt_response()"
    },
    {
      "cve": "CVE-2018-16421",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1628034"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "opensc: Buffer overflows handling responses from CAC Cards in card-cac.c:cac_get_serial_nr_from_CUID()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-0:0.19.0-3.el7.src",
          "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-0:0.19.0-3.el7.src",
          "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-16421"
        },
        {
          "category": "external",
          "summary": "RHBZ#1628034",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628034"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-16421",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-16421"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16421",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16421"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        }
      ],
      "release_date": "2018-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-08-06T12:30:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "opensc: Buffer overflows handling responses from CAC Cards in card-cac.c:cac_get_serial_nr_from_CUID()"
    },
    {
      "cve": "CVE-2018-16422",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1628016"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "opensc: Buffer overflow handling responses from esteid cards in pkcs15-esteid.c:sc_pkcs15emu_esteid_init()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-0:0.19.0-3.el7.src",
          "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-0:0.19.0-3.el7.src",
          "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-16422"
        },
        {
          "category": "external",
          "summary": "RHBZ#1628016",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628016"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-16422",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-16422"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16422",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16422"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        }
      ],
      "release_date": "2018-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-08-06T12:30:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "opensc: Buffer overflow handling responses from esteid cards in pkcs15-esteid.c:sc_pkcs15emu_esteid_init()"
    },
    {
      "cve": "CVE-2018-16423",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1628020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "opensc: Double free handling responses from smartcards in libopensc/sc.c:sc_file_set_sec_attr()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-0:0.19.0-3.el7.src",
          "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-0:0.19.0-3.el7.src",
          "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-16423"
        },
        {
          "category": "external",
          "summary": "RHBZ#1628020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-16423",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-16423"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16423",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16423"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        }
      ],
      "release_date": "2018-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-08-06T12:30:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "opensc: Double free handling responses from smartcards in libopensc/sc.c:sc_file_set_sec_attr()"
    },
    {
      "cve": "CVE-2018-16426",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1628044"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "opensc: Infinite recusrion handling responses from IAS-ECC cards in card-iasecc.c:iasecc_select_file()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-0:0.19.0-3.el7.src",
          "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-0:0.19.0-3.el7.src",
          "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-16426"
        },
        {
          "category": "external",
          "summary": "RHBZ#1628044",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628044"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-16426",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-16426"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16426",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16426"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        }
      ],
      "release_date": "2018-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-08-06T12:30:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.4,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "opensc: Infinite recusrion handling responses from IAS-ECC cards in card-iasecc.c:iasecc_select_file()"
    },
    {
      "cve": "CVE-2018-16427",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-09-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1628052"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "opensc: Out of bounds reads handling responses from smartcards",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-0:0.19.0-3.el7.src",
          "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
          "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-0:0.19.0-3.el7.src",
          "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
          "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
          "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-16427"
        },
        {
          "category": "external",
          "summary": "RHBZ#1628052",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1628052"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-16427",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-16427"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-16427",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16427"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        }
      ],
      "release_date": "2018-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-08-06T12:30:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-0:0.19.0-3.el7.src",
            "7Client-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Client-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.src",
            "7ComputeNode-optional-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7ComputeNode-optional-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-0:0.19.0-3.el7.src",
            "7Server-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Server-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.src",
            "7Workstation-7.7:opensc-0:0.19.0-3.el7.x86_64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.i686",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.ppc64le",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.s390x",
            "7Workstation-7.7:opensc-debuginfo-0:0.19.0-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "opensc: Out of bounds reads handling responses from smartcards"
    }
  ]
}

cve-2018-16391

Vulnerability from cvelistv5

Published

2018-09-03 14:00

Modified

2024-08-05 10:24

Severity ?

Summary

Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

References

▼	URL	Tags
	https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-477b7a40136bb418b10ce271c8664536	x_refsource_MISC
	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1	x_refsource_MISC
	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:2154	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:32.082Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-477b7a40136bb418b10ce271c8664536"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
          },
          {
            "name": "RHSA-2019:2154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2154"
          },
          {
            "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-11T21:06:12",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-477b7a40136bb418b10ce271c8664536"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        },
        {
          "name": "RHSA-2019:2154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        },
        {
          "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16391",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-477b7a40136bb418b10ce271c8664536",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-477b7a40136bb418b10ce271c8664536"
            },
            {
              "name": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
            },
            {
              "name": "RHSA-2019:2154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2154"
            },
            {
              "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16391",
    "datePublished": "2018-09-03T14:00:00",
    "dateReserved": "2018-09-03T00:00:00",
    "dateUpdated": "2024-08-05T10:24:32.082Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16418

Vulnerability from cvelistv5

Published

2018-09-04 00:00

Modified

2024-08-05 10:24

Severity ?

Summary

A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

References

▼	URL	Tags
	https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-628c8445c4e7ae92bbc4be08ba11a4c3	x_refsource_MISC
	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1	x_refsource_MISC
	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:2154	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:32.203Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-628c8445c4e7ae92bbc4be08ba11a4c3"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
          },
          {
            "name": "RHSA-2019:2154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2154"
          },
          {
            "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-11T21:06:11",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-628c8445c4e7ae92bbc4be08ba11a4c3"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        },
        {
          "name": "RHSA-2019:2154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        },
        {
          "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16418",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-628c8445c4e7ae92bbc4be08ba11a4c3",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-628c8445c4e7ae92bbc4be08ba11a4c3"
            },
            {
              "name": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
            },
            {
              "name": "RHSA-2019:2154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2154"
            },
            {
              "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16418",
    "datePublished": "2018-09-04T00:00:00",
    "dateReserved": "2018-09-03T00:00:00",
    "dateUpdated": "2024-08-05T10:24:32.203Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16421

Vulnerability from cvelistv5

Published

2018-09-04 00:00

Modified

2024-08-05 10:24

Severity ?

Summary

Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

References

▼	URL	Tags
	https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-848b13147a344ba2c6361d91ca77feb1	x_refsource_MISC
	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1	x_refsource_MISC
	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:2154	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:32.197Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-848b13147a344ba2c6361d91ca77feb1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
          },
          {
            "name": "RHSA-2019:2154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2154"
          },
          {
            "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-11T21:06:11",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-848b13147a344ba2c6361d91ca77feb1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        },
        {
          "name": "RHSA-2019:2154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        },
        {
          "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16421",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-848b13147a344ba2c6361d91ca77feb1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-848b13147a344ba2c6361d91ca77feb1"
            },
            {
              "name": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
            },
            {
              "name": "RHSA-2019:2154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2154"
            },
            {
              "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16421",
    "datePublished": "2018-09-04T00:00:00",
    "dateReserved": "2018-09-03T00:00:00",
    "dateUpdated": "2024-08-05T10:24:32.197Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16420

Vulnerability from cvelistv5

Published

2018-09-04 00:00

Modified

2024-08-05 10:24

Severity ?

Summary

Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

References

▼	URL	Tags
	https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b36536074d13447fbbec061e0e64d15d	x_refsource_MISC
	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1	x_refsource_MISC
	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:2154	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:32.104Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b36536074d13447fbbec061e0e64d15d"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
          },
          {
            "name": "RHSA-2019:2154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2154"
          },
          {
            "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-11T21:06:11",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b36536074d13447fbbec061e0e64d15d"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        },
        {
          "name": "RHSA-2019:2154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        },
        {
          "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16420",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b36536074d13447fbbec061e0e64d15d",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b36536074d13447fbbec061e0e64d15d"
            },
            {
              "name": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
            },
            {
              "name": "RHSA-2019:2154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2154"
            },
            {
              "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16420",
    "datePublished": "2018-09-04T00:00:00",
    "dateReserved": "2018-09-03T00:00:00",
    "dateUpdated": "2024-08-05T10:24:32.104Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16422

Vulnerability from cvelistv5

Published

2018-09-04 00:00

Modified

2024-08-05 10:24

Severity ?

Summary

A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

References

▼	URL	Tags
	https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-d64c08c80437cf0006ada91e50f20ba0	x_refsource_MISC
	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1	x_refsource_MISC
	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:2154	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:31.920Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-d64c08c80437cf0006ada91e50f20ba0"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
          },
          {
            "name": "RHSA-2019:2154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2154"
          },
          {
            "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-11T21:06:11",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-d64c08c80437cf0006ada91e50f20ba0"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        },
        {
          "name": "RHSA-2019:2154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        },
        {
          "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16422",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-d64c08c80437cf0006ada91e50f20ba0",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-d64c08c80437cf0006ada91e50f20ba0"
            },
            {
              "name": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
            },
            {
              "name": "RHSA-2019:2154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2154"
            },
            {
              "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16422",
    "datePublished": "2018-09-04T00:00:00",
    "dateReserved": "2018-09-03T00:00:00",
    "dateUpdated": "2024-08-05T10:24:31.920Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16392

Vulnerability from cvelistv5

Published

2018-09-03 14:00

Modified

2024-08-05 10:24

Severity ?

Summary

Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

References

▼	URL	Tags
	https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b2a356323a9ff2024d041cf2d7e89dd3	x_refsource_MISC
	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1	x_refsource_MISC
	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:2154	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:31.930Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b2a356323a9ff2024d041cf2d7e89dd3"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
          },
          {
            "name": "RHSA-2019:2154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2154"
          },
          {
            "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-11T21:06:12",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b2a356323a9ff2024d041cf2d7e89dd3"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        },
        {
          "name": "RHSA-2019:2154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        },
        {
          "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16392",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b2a356323a9ff2024d041cf2d7e89dd3",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b2a356323a9ff2024d041cf2d7e89dd3"
            },
            {
              "name": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
            },
            {
              "name": "RHSA-2019:2154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2154"
            },
            {
              "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16392",
    "datePublished": "2018-09-03T14:00:00",
    "dateReserved": "2018-09-03T00:00:00",
    "dateUpdated": "2024-08-05T10:24:31.930Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16393

Vulnerability from cvelistv5

Published

2018-09-03 14:00

Modified

2024-08-05 10:24

Severity ?

Summary

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

References

▼	URL	Tags
	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1	x_refsource_MISC
	https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad	x_refsource_MISC
	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:2154	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:32.179Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
          },
          {
            "name": "RHSA-2019:2154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2154"
          },
          {
            "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-11T21:06:11",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        },
        {
          "name": "RHSA-2019:2154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        },
        {
          "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16393",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
            },
            {
              "name": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
            },
            {
              "name": "RHSA-2019:2154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2154"
            },
            {
              "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16393",
    "datePublished": "2018-09-03T14:00:00",
    "dateReserved": "2018-09-03T00:00:00",
    "dateUpdated": "2024-08-05T10:24:32.179Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16427

Vulnerability from cvelistv5

Published

2018-09-04 00:00

Modified

2024-08-05 10:24

Severity ?

Summary

Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs.

References

▼	URL	Tags
	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1	x_refsource_MISC
	https://github.com/OpenSC/OpenSC/pull/1447/commits/8fe377e93b4b56060e5bbfb6f3142ceaeca744fa	x_refsource_MISC
	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:2154	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:32.156Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/pull/1447/commits/8fe377e93b4b56060e5bbfb6f3142ceaeca744fa"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
          },
          {
            "name": "RHSA-2019:2154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2154"
          },
          {
            "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-11T21:06:13",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/pull/1447/commits/8fe377e93b4b56060e5bbfb6f3142ceaeca744fa"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        },
        {
          "name": "RHSA-2019:2154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        },
        {
          "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16427",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
            },
            {
              "name": "https://github.com/OpenSC/OpenSC/pull/1447/commits/8fe377e93b4b56060e5bbfb6f3142ceaeca744fa",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/pull/1447/commits/8fe377e93b4b56060e5bbfb6f3142ceaeca744fa"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
            },
            {
              "name": "RHSA-2019:2154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2154"
            },
            {
              "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16427",
    "datePublished": "2018-09-04T00:00:00",
    "dateReserved": "2018-09-03T00:00:00",
    "dateUpdated": "2024-08-05T10:24:32.156Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16426

Vulnerability from cvelistv5

Published

2018-09-04 00:00

Modified

2024-08-05 10:24

Severity ?

Summary

Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs.

References

▼	URL	Tags
	https://github.com/OpenSC/OpenSC/commit/03628449b75a93787eb2359412a3980365dda49b#diff-f8c0128e14031ed9307d47f10f601b54	x_refsource_MISC
	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1	x_refsource_MISC
	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:2154	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:32.081Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/commit/03628449b75a93787eb2359412a3980365dda49b#diff-f8c0128e14031ed9307d47f10f601b54"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
          },
          {
            "name": "RHSA-2019:2154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2154"
          },
          {
            "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-11T21:06:13",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/commit/03628449b75a93787eb2359412a3980365dda49b#diff-f8c0128e14031ed9307d47f10f601b54"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        },
        {
          "name": "RHSA-2019:2154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        },
        {
          "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16426",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/OpenSC/OpenSC/commit/03628449b75a93787eb2359412a3980365dda49b#diff-f8c0128e14031ed9307d47f10f601b54",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/commit/03628449b75a93787eb2359412a3980365dda49b#diff-f8c0128e14031ed9307d47f10f601b54"
            },
            {
              "name": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
            },
            {
              "name": "RHSA-2019:2154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2154"
            },
            {
              "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16426",
    "datePublished": "2018-09-04T00:00:00",
    "dateReserved": "2018-09-03T00:00:00",
    "dateUpdated": "2024-08-05T10:24:32.081Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16423

Vulnerability from cvelistv5

Published

2018-09-04 00:00

Modified

2024-08-05 10:24

Severity ?

Summary

A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

References

▼	URL	Tags
	https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-db0cd89ff279ad8c7b3bb780cdf2770a	x_refsource_MISC
	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1	x_refsource_MISC
	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:2154	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:32.221Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-db0cd89ff279ad8c7b3bb780cdf2770a"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
          },
          {
            "name": "RHSA-2019:2154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2154"
          },
          {
            "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-11T21:06:12",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-db0cd89ff279ad8c7b3bb780cdf2770a"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        },
        {
          "name": "RHSA-2019:2154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        },
        {
          "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16423",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-db0cd89ff279ad8c7b3bb780cdf2770a",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-db0cd89ff279ad8c7b3bb780cdf2770a"
            },
            {
              "name": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
            },
            {
              "name": "RHSA-2019:2154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2154"
            },
            {
              "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16423",
    "datePublished": "2018-09-04T00:00:00",
    "dateReserved": "2018-09-03T00:00:00",
    "dateUpdated": "2024-08-05T10:24:32.221Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-16419

Vulnerability from cvelistv5

Published

2018-09-04 00:00

Modified

2024-08-05 10:24

Severity ?

Summary

Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

References

▼	URL	Tags
	https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-a6074523a9cbd875e26c58e20868fb15	x_refsource_MISC
	https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1	x_refsource_MISC
	https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:2154	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:31.993Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-a6074523a9cbd875e26c58e20868fb15"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
          },
          {
            "name": "RHSA-2019:2154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2154"
          },
          {
            "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-11T21:06:12",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-a6074523a9cbd875e26c58e20868fb15"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
        },
        {
          "name": "RHSA-2019:2154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2154"
        },
        {
          "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16419",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-a6074523a9cbd875e26c58e20868fb15",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-a6074523a9cbd875e26c58e20868fb15"
            },
            {
              "name": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1",
              "refsource": "MISC",
              "url": "https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/"
            },
            {
              "name": "RHSA-2019:2154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2154"
            },
            {
              "name": "[debian-lts-announce] 20190911 [SECURITY] [DLA 1916-1] opensc security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16419",
    "datePublished": "2018-09-04T00:00:00",
    "dateReserved": "2018-09-03T00:00:00",
    "dateUpdated": "2024-08-05T10:24:31.993Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature