CVE-2019-16058

An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC

published September 6, 2019

CVSS
—
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the signature scheme.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01526 · 74.5th percentile
Published
2019-09-06T17:51Z
EPSS history
Timeline
  • 06 SEP 17:51Z
    An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC
    cvelistv5