Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2018-16426
Description:Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-16426
https://github.com/OpenSC/OpenSC/commit/03628449b75a93787eb2359412a3980365dda49b#diff-f8c0128e14031ed9307d47f10f601b54
https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1
https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/
https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html
RedHat Security Advisories: RHSA-2019:2154
https://access.redhat.com/errata/RHSA-2019:2154




© 1998-2025 E-Soft Inc. All rights reserved.