CVE-2019-16058

    Dashboard / Vulnerabilities / CVE-2019-16058

    CVE-2019-16058

    Published: 6 Sept 2019Last Modified: 8 Jul 2026

    Summary:

    Details: An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the signature scheme.

    References: http://www.openwall.com/lists/oss-security/2019/09/12/1, https://github.com/OpenSC/pam_p11/commit/d150b60e1e14c261b113f55681419ad1dfa8a76c

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -d150b60e1e14c261b113f55681419ad1dfa8a76c

    Affected versions

    pam_p11-0.3.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High