CVE-2018-16424 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-16424 Interim 1 45 2025-11-05T03:24:31Z current 2021-05-30T14:16:29Z 2025-11-05T03:24:31Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-16424 A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/update/announcement/2018/suse-su-20183629-1.html E-Mail link for SUSE-SU-2018:3629-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IN5FH6UV3HZ2KKFGV3VSQLHDGZFFIU3X/#IN5FH6UV3HZ2KKFGV3VSQLHDGZFFIU3X E-Mail link for openSUSE-SU-2018:3716-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.0 openSUSE Tumbleweed libopensc2 libopensc2-32bit opensc opensc-0.18.0-3.8.1 opensc-0.18.0-lp150.2.9.1 opensc-0.19.0-1.14 opensc-0.19.0-3.7.1 opensc-0.21.0-2.2 opensc-0.22.0-150400.1.7 opensc-0.22.0-150400.3.3.1 opensc-0.22.0-150600.11.3.1 opensc-0.22.0-150600.9.3 opensc-0.24.0-2.1 opensc-0.24.0-slfo.1.1_1.2 opensc-0.26.1-160000.2.2 opensc-32bit opensc-32bit-0.18.0-lp150.2.9.1 opensc-32bit-0.21.0-2.2 opensc-devel opensc-0.19.0-3.7.1 as a component of SUSE Linux Enterprise Micro 5.1 opensc-0.19.0-3.7.1 as a component of SUSE Linux Enterprise Micro 5.2 opensc-0.22.0-150400.1.7 as a component of SUSE Linux Enterprise Micro 5.3 opensc-0.22.0-150400.1.7 as a component of SUSE Linux Enterprise Micro 5.4 opensc-0.22.0-150400.3.3.1 as a component of SUSE Linux Enterprise Micro 5.5 opensc-0.18.0-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 opensc-0.19.0-1.14 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 opensc-0.19.0-1.14 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 opensc-0.19.0-3.7.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 opensc-0.22.0-150400.1.7 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 opensc-0.22.0-150400.1.7 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 opensc-0.22.0-150600.9.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 opensc-0.22.0-150600.11.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 opensc-0.26.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 opensc-0.24.0-2.1 as a component of SUSE Linux Micro 6.0 opensc-0.24.0-slfo.1.1_1.2 as a component of SUSE Linux Micro 6.1 opensc-0.18.0-lp150.2.9.1 as a component of openSUSE Leap 15.0 opensc-32bit-0.18.0-lp150.2.9.1 as a component of openSUSE Leap 15.0 opensc-0.21.0-2.2 as a component of openSUSE Tumbleweed opensc-32bit-0.21.0-2.2 as a component of openSUSE Tumbleweed opensc as a component of SUSE CaaS Platform 4.0 opensc as a component of SUSE Enterprise Storage 6 opensc as a component of SUSE Linux Enterprise Desktop 12 SP3 opensc as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS opensc as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 opensc as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata opensc as a component of SUSE Linux Enterprise Server 11 SP3 LTSS opensc as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata libopensc2 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libopensc2-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS opensc as a component of SUSE Linux Enterprise Server 11 SP4-LTSS opensc-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS opensc as a component of SUSE Linux Enterprise Server 12 SP1-LTSS opensc as a component of SUSE Linux Enterprise Server 12 SP2-LTSS opensc as a component of SUSE Linux Enterprise Server 12 SP3 opensc as a component of SUSE Linux Enterprise Server 12-LTSS opensc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS opensc as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 opensc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 opensc-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 opensc as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 opensc as a component of SUSE Manager Proxy 4.0 opensc as a component of SUSE Manager Retail Branch Server 4.0 opensc as a component of SUSE Manager Server 4.0 A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact. CVE-2018-16424 SUSE Linux Enterprise Micro 5.1:opensc-0.19.0-3.7.1 SUSE Linux Enterprise Micro 5.2:opensc-0.19.0-3.7.1 SUSE Linux Enterprise Micro 5.3:opensc-0.22.0-150400.1.7 SUSE Linux Enterprise Micro 5.4:opensc-0.22.0-150400.1.7 SUSE Linux Enterprise Micro 5.5:opensc-0.22.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15:opensc-0.18.0-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:opensc-0.19.0-1.14 SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0.19.0-1.14 SUSE Linux Enterprise Module for Basesystem 15 SP3:opensc-0.19.0-3.7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:opensc-0.22.0-150400.1.7 SUSE Linux Enterprise Module for Basesystem 15 SP5:opensc-0.22.0-150400.1.7 SUSE Linux Enterprise Module for Basesystem 15 SP6:opensc-0.22.0-150600.9.3 SUSE Linux Enterprise Module for Basesystem 15 SP7:opensc-0.22.0-150600.11.3.1 SUSE Linux Enterprise Server 16.0:opensc-0.26.1-160000.2.2 SUSE Linux Micro 6.0:opensc-0.24.0-2.1 SUSE Linux Micro 6.1:opensc-0.24.0-slfo.1.1_1.2 openSUSE Leap 15.0:opensc-0.18.0-lp150.2.9.1 openSUSE Leap 15.0:opensc-32bit-0.18.0-lp150.2.9.1 openSUSE Tumbleweed:opensc-0.21.0-2.2 openSUSE Tumbleweed:opensc-32bit-0.21.0-2.2 SUSE CaaS Platform 4.0:opensc SUSE Enterprise Storage 6:opensc SUSE Linux Enterprise Desktop 12 SP3:opensc SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:opensc SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc SUSE Linux Enterprise Server 11 SP1 for Teradata:opensc SUSE Linux Enterprise Server 11 SP3 LTSS:opensc SUSE Linux Enterprise Server 11 SP3 for Teradata:opensc SUSE Linux Enterprise Server 11 SP4-LTSS:libopensc2 SUSE Linux Enterprise Server 11 SP4-LTSS:libopensc2-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:opensc SUSE Linux Enterprise Server 11 SP4-LTSS:opensc-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:opensc SUSE Linux Enterprise Server 12 SP2-LTSS:opensc SUSE Linux Enterprise Server 12 SP3:opensc SUSE Linux Enterprise Server 12-LTSS:opensc SUSE Linux Enterprise Server 15 SP1-LTSS:opensc SUSE Linux Enterprise Server Business Critical Linux 15 SP1:opensc SUSE Linux Enterprise Server for SAP Applications 15 SP1:opensc SUSE Linux Enterprise Software Development Kit 11 SP4:opensc SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel SUSE Manager Proxy 4.0:opensc SUSE Manager Retail Branch Server 4.0:opensc SUSE Manager Server 4.0:opensc moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P 4.6 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H