CVE-2018-16418
Description
A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Buffer overflow in OpenSC's util_acl_to_str function allows attackers with crafted smartcards to cause denial of service or potentially execute arbitrary code.
Vulnerability
A buffer overflow exists in the util_acl_to_str function in tools/util.c of OpenSC before version 0.19.0-rc1, triggered during string concatenation of crafted smartcard responses. Affected versions include 0.17.0 and earlier [2][4].
Exploitation
An attacker must supply a malicious smartcard that sends specially crafted responses to APDU commands. When a user or application invokes the vulnerable function to process such data, the overflow occurs. No authentication is required for the card interaction [2].
Impact
Successful exploitation can cause a denial of service (application crash). The advisory suggests potential for arbitrary code execution, though this is not confirmed [1][2].
Mitigation
The issue is fixed in OpenSC 0.19.0-rc1 [4]. Red Hat provides an advisory (RHSA-2019:2154) and updated packages [1]. Users should upgrade to the patched version. No workarounds are documented.
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
12- Range: <0.19.0-rc1
- osv-coords11 versionspkg:rpm/opensuse/opensc&distro=openSUSE%20Tumbleweedpkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4
< 0.21.0-2.2+ 10 more
- (no CPE)range: < 0.21.0-2.2
- (no CPE)range: < 0.13.0-3.3.2
- (no CPE)range: < 0.13.0-3.3.2
- (no CPE)range: < 0.18.0-3.8.1
- (no CPE)range: < 0.11.6-5.27.3.1
- (no CPE)range: < 0.13.0-3.3.2
- (no CPE)range: < 0.13.0-3.3.2
- (no CPE)range: < 0.11.6-5.27.3.1
- (no CPE)range: < 0.13.0-3.3.2
- (no CPE)range: < 0.13.0-3.3.2
- (no CPE)range: < 0.11.6-5.27.3.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- access.redhat.com/errata/RHSA-2019:2154mitrevendor-advisoryx_refsource_REDHAT
- github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160admitrex_refsource_MISC
- github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1mitrex_refsource_MISC
- lists.debian.org/debian-lts-announce/2019/09/msg00009.htmlmitremailing-listx_refsource_MLIST
- www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.