OpenSC CVE-2018-16422 Local Buffer Overflow Vulnerability

Bugtraq ID:	107519
Class:	Boundary Condition Error
CVE:	CVE-2018-16422
Remote:	No
Local:	Yes
Published:	Sep 12 2018 12:00AM
Updated:	Sep 12 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Redhat Enterprise Linux 7 Opensc-Project Opensc 0.11.5 Opensc-Project Opensc 0.11.4 Opensc-Project Opensc 0.11.3 Opensc-Project Opensc 0.11.2 Opensc-Project Opensc 0.11.1 Opensc-Project Opensc 0.11 Opensc-Project Opensc 0.10.1 Opensc-Project Opensc 0.9.6 Opensc-Project Opensc 0.9.4 Opensc-Project Opensc 0.9.3 Opensc-Project Opensc 0.9.2 Opensc-Project Opensc 0.8.1 Opensc-Project Opensc 0.7 Opensc-Project Opensc 0.6.1 Opensc-Project Opensc 0.6 Opensc-Project Opensc 0.5 Opensc-Project Opensc 0.4 Opensc-Project Opensc 0.9.5 Opensc-Project Opensc 0.8.0 Opensc-Project Opensc 0.11.3 Pre3 Opensc-Project Opensc 0.10.0
Not Vulnerable:	Opensc-Project Opensc 0.19.0-rc1

OpenSC CVE-2018-16422 Local Buffer Overflow Vulnerability

OpenSC is prone to a local buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploits will result in denial-of-service condition.

Versions prior to OpenSC 0.19.0-rc1 are vulnerable.

OpenSC CVE-2018-16422 Local Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OpenSC CVE-2018-16422 Local Buffer Overflow Vulnerability

References:

• OpenSC Homepage (OpenSC)
  
• Bug 1628016 (CVE-2018-16422) - CVE-2018-16422 opensc: Buffer overflow handling (Redhat)
  
• CVE-2018-16422 (Redhat)