SUSE-SU-2018:3621-1

Vulnerability from csaf_suse - Published: 2018-11-05 16:59 - Updated: 2026-09-20 12:59
Summary
Security update for opensc
Severity
Moderate
Notes
Title of the patch: Security update for opensc
Description of the patch: This update for opensc fixes the following issues: - CVE-2018-16391: Fixed a denial of service when handling responses from a Muscle Card (bsc#1106998) - CVE-2018-16392: Fixed a denial of service when handling responses from a TCOS Card (bsc#1106999) - CVE-2018-16393: Fixed buffer overflows when handling responses from Gemsafe V1 Smartcards (bsc#1108318) - CVE-2018-16418: Fixed buffer overflow when handling string concatenation in util_acl_to_str (bsc#1107039) - CVE-2018-16419: Fixed several buffer overflows when handling responses from a Cryptoflex card (bsc#1107107) - CVE-2018-16422: Fixed single byte buffer overflow when handling responses from an esteid Card (bsc#1107038) - CVE-2018-16423: Fixed double free when handling responses from a smartcard (bsc#1107037) - CVE-2018-16427: Fixed out of bounds reads when handling responses in OpenSC (bsc#1107033)
Patchnames: sdksp4-opensc-13856,slessp4-opensc-13856
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2018-16391
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2018-16392
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16393
4.3 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16418
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16419
4.3 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16422
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16423
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16427
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1104812 self
https://bugzilla.suse.com/1106998 self
https://bugzilla.suse.com/1106999 self
https://bugzilla.suse.com/1107033 self
https://bugzilla.suse.com/1107037 self
https://bugzilla.suse.com/1107038 self
https://bugzilla.suse.com/1107039 self
https://bugzilla.suse.com/1107107 self
https://bugzilla.suse.com/1108318 self
https://www.suse.com/security/cve/CVE-2018-16391/ self
https://www.suse.com/security/cve/CVE-2018-16392/ self
https://www.suse.com/security/cve/CVE-2018-16393/ self
https://www.suse.com/security/cve/CVE-2018-16418/ self
https://www.suse.com/security/cve/CVE-2018-16419/ self
https://www.suse.com/security/cve/CVE-2018-16422/ self
https://www.suse.com/security/cve/CVE-2018-16423/ self
https://www.suse.com/security/cve/CVE-2018-16427/ self
https://www.suse.com/security/cve/CVE-2018-16391 external
https://bugzilla.suse.com/1106998 external
https://www.suse.com/security/cve/CVE-2018-16392 external
https://bugzilla.suse.com/1106999 external
https://www.suse.com/security/cve/CVE-2018-16393 external
https://bugzilla.suse.com/1108318 external
https://www.suse.com/security/cve/CVE-2018-16418 external
https://bugzilla.suse.com/1107039 external
https://www.suse.com/security/cve/CVE-2018-16419 external
https://bugzilla.suse.com/1107107 external
https://www.suse.com/security/cve/CVE-2018-16422 external
https://bugzilla.suse.com/1107038 external
https://www.suse.com/security/cve/CVE-2018-16423 external
https://bugzilla.suse.com/1107037 external
https://www.suse.com/security/cve/CVE-2018-16427 external
https://bugzilla.suse.com/1107033 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for opensc",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for opensc fixes the following issues:\n\n- CVE-2018-16391: Fixed a denial of service when handling responses from a Muscle Card (bsc#1106998)\n- CVE-2018-16392: Fixed a denial of service when handling responses from a TCOS Card (bsc#1106999)\n- CVE-2018-16393: Fixed buffer overflows when handling responses from Gemsafe V1 Smartcards (bsc#1108318)\n- CVE-2018-16418: Fixed buffer overflow when handling string concatenation in util_acl_to_str (bsc#1107039)\n- CVE-2018-16419: Fixed several buffer overflows when handling responses from a Cryptoflex card (bsc#1107107)\n- CVE-2018-16422: Fixed single byte buffer overflow when handling responses from an esteid Card (bsc#1107038)\n- CVE-2018-16423: Fixed double free when handling responses from a smartcard (bsc#1107037)\n- CVE-2018-16427: Fixed out of bounds reads when handling responses in OpenSC (bsc#1107033)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sdksp4-opensc-13856,slessp4-opensc-13856",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3621-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2018:3621-1",
        "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183621-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2018:3621-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2018-November/004829.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1104812",
        "url": "https://bugzilla.suse.com/1104812"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1106998",
        "url": "https://bugzilla.suse.com/1106998"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1106999",
        "url": "https://bugzilla.suse.com/1106999"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107033",
        "url": "https://bugzilla.suse.com/1107033"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107037",
        "url": "https://bugzilla.suse.com/1107037"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107038",
        "url": "https://bugzilla.suse.com/1107038"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107039",
        "url": "https://bugzilla.suse.com/1107039"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107107",
        "url": "https://bugzilla.suse.com/1107107"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1108318",
        "url": "https://bugzilla.suse.com/1108318"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16391 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16391/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16392 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16392/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16393 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16393/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16418 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16418/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16419 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16419/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16422 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16422/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16423 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16423/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16427 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16427/"
      }
    ],
    "title": "Security update for opensc",
    "tracking": {
      "current_release_date": "2026-09-20T12:59:43Z",
      "generator": {
        "date": "2018-11-05T16:59:27Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2018:3621-1",
      "initial_release_date": "2018-11-05T16:59:27Z",
      "revision_history": [
        {
          "date": "2018-11-05T16:59:27Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T12:59:43Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-devel-0:0.11.6-5.27.3.1.i586",
                "product": {
                  "name": "opensc-devel-0:0.11.6-5.27.3.1.i586",
                  "product_id": "opensc-devel-0:0.11.6-5.27.3.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc-devel@0.11.6-5.27.3.1?arch=i586\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libopensc2-0:0.11.6-5.27.3.1.i586",
                "product": {
                  "name": "libopensc2-0:0.11.6-5.27.3.1.i586",
                  "product_id": "libopensc2-0:0.11.6-5.27.3.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libopensc2@0.11.6-5.27.3.1?arch=i586\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-0:0.11.6-5.27.3.1.i586",
                "product": {
                  "name": "opensc-0:0.11.6-5.27.3.1.i586",
                  "product_id": "opensc-0:0.11.6-5.27.3.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.11.6-5.27.3.1?arch=i586\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-devel-0:0.11.6-5.27.3.1.ia64",
                "product": {
                  "name": "opensc-devel-0:0.11.6-5.27.3.1.ia64",
                  "product_id": "opensc-devel-0:0.11.6-5.27.3.1.ia64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc-devel@0.11.6-5.27.3.1?arch=ia64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libopensc2-0:0.11.6-5.27.3.1.ia64",
                "product": {
                  "name": "libopensc2-0:0.11.6-5.27.3.1.ia64",
                  "product_id": "libopensc2-0:0.11.6-5.27.3.1.ia64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libopensc2@0.11.6-5.27.3.1?arch=ia64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libopensc2-x86-0:0.11.6-5.27.3.1.ia64",
                "product": {
                  "name": "libopensc2-x86-0:0.11.6-5.27.3.1.ia64",
                  "product_id": "libopensc2-x86-0:0.11.6-5.27.3.1.ia64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libopensc2-x86@0.11.6-5.27.3.1?arch=ia64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-0:0.11.6-5.27.3.1.ia64",
                "product": {
                  "name": "opensc-0:0.11.6-5.27.3.1.ia64",
                  "product_id": "opensc-0:0.11.6-5.27.3.1.ia64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.11.6-5.27.3.1?arch=ia64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-x86-0:0.11.6-5.27.3.1.ia64",
                "product": {
                  "name": "opensc-x86-0:0.11.6-5.27.3.1.ia64",
                  "product_id": "opensc-x86-0:0.11.6-5.27.3.1.ia64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc-x86@0.11.6-5.27.3.1?arch=ia64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-devel-0:0.11.6-5.27.3.1.ppc64",
                "product": {
                  "name": "opensc-devel-0:0.11.6-5.27.3.1.ppc64",
                  "product_id": "opensc-devel-0:0.11.6-5.27.3.1.ppc64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc-devel@0.11.6-5.27.3.1?arch=ppc64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libopensc2-0:0.11.6-5.27.3.1.ppc64",
                "product": {
                  "name": "libopensc2-0:0.11.6-5.27.3.1.ppc64",
                  "product_id": "libopensc2-0:0.11.6-5.27.3.1.ppc64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libopensc2@0.11.6-5.27.3.1?arch=ppc64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libopensc2-32bit-0:0.11.6-5.27.3.1.ppc64",
                "product": {
                  "name": "libopensc2-32bit-0:0.11.6-5.27.3.1.ppc64",
                  "product_id": "libopensc2-32bit-0:0.11.6-5.27.3.1.ppc64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libopensc2-32bit@0.11.6-5.27.3.1?arch=ppc64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-0:0.11.6-5.27.3.1.ppc64",
                "product": {
                  "name": "opensc-0:0.11.6-5.27.3.1.ppc64",
                  "product_id": "opensc-0:0.11.6-5.27.3.1.ppc64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.11.6-5.27.3.1?arch=ppc64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-32bit-0:0.11.6-5.27.3.1.ppc64",
                "product": {
                  "name": "opensc-32bit-0:0.11.6-5.27.3.1.ppc64",
                  "product_id": "opensc-32bit-0:0.11.6-5.27.3.1.ppc64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc-32bit@0.11.6-5.27.3.1?arch=ppc64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-devel-0:0.11.6-5.27.3.1.s390x",
                "product": {
                  "name": "opensc-devel-0:0.11.6-5.27.3.1.s390x",
                  "product_id": "opensc-devel-0:0.11.6-5.27.3.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc-devel@0.11.6-5.27.3.1?arch=s390x\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libopensc2-0:0.11.6-5.27.3.1.s390x",
                "product": {
                  "name": "libopensc2-0:0.11.6-5.27.3.1.s390x",
                  "product_id": "libopensc2-0:0.11.6-5.27.3.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libopensc2@0.11.6-5.27.3.1?arch=s390x\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libopensc2-32bit-0:0.11.6-5.27.3.1.s390x",
                "product": {
                  "name": "libopensc2-32bit-0:0.11.6-5.27.3.1.s390x",
                  "product_id": "libopensc2-32bit-0:0.11.6-5.27.3.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libopensc2-32bit@0.11.6-5.27.3.1?arch=s390x\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-0:0.11.6-5.27.3.1.s390x",
                "product": {
                  "name": "opensc-0:0.11.6-5.27.3.1.s390x",
                  "product_id": "opensc-0:0.11.6-5.27.3.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.11.6-5.27.3.1?arch=s390x\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-32bit-0:0.11.6-5.27.3.1.s390x",
                "product": {
                  "name": "opensc-32bit-0:0.11.6-5.27.3.1.s390x",
                  "product_id": "opensc-32bit-0:0.11.6-5.27.3.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc-32bit@0.11.6-5.27.3.1?arch=s390x\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-devel-0:0.11.6-5.27.3.1.x86_64",
                "product": {
                  "name": "opensc-devel-0:0.11.6-5.27.3.1.x86_64",
                  "product_id": "opensc-devel-0:0.11.6-5.27.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc-devel@0.11.6-5.27.3.1?arch=x86_64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libopensc2-0:0.11.6-5.27.3.1.x86_64",
                "product": {
                  "name": "libopensc2-0:0.11.6-5.27.3.1.x86_64",
                  "product_id": "libopensc2-0:0.11.6-5.27.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libopensc2@0.11.6-5.27.3.1?arch=x86_64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libopensc2-32bit-0:0.11.6-5.27.3.1.x86_64",
                "product": {
                  "name": "libopensc2-32bit-0:0.11.6-5.27.3.1.x86_64",
                  "product_id": "libopensc2-32bit-0:0.11.6-5.27.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libopensc2-32bit@0.11.6-5.27.3.1?arch=x86_64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-0:0.11.6-5.27.3.1.x86_64",
                "product": {
                  "name": "opensc-0:0.11.6-5.27.3.1.x86_64",
                  "product_id": "opensc-0:0.11.6-5.27.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.11.6-5.27.3.1?arch=x86_64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-32bit-0:0.11.6-5.27.3.1.x86_64",
                "product": {
                  "name": "opensc-32bit-0:0.11.6-5.27.3.1.x86_64",
                  "product_id": "opensc-32bit-0:0.11.6-5.27.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.11.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc-32bit@0.11.6-5.27.3.1?arch=x86_64\u0026upstream=opensc-0:0.11.6-5.27.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:suse:sle-sdk:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 11 SP4",
                  "product_id": "SUSE Linux Enterprise Desktop 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sled:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-devel-0:0.11.6-5.27.3.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        },
        "product_reference": "opensc-devel-0:0.11.6-5.27.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-16391",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16391"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16391",
          "url": "https://www.suse.com/security/cve/CVE-2018-16391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106998 for CVE-2018-16391",
          "url": "https://bugzilla.suse.com/1106998"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:59:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16391"
    },
    {
      "cve": "CVE-2018-16392",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16392"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16392",
          "url": "https://www.suse.com/security/cve/CVE-2018-16392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106999 for CVE-2018-16392",
          "url": "https://bugzilla.suse.com/1106999"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:59:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16392"
    },
    {
      "cve": "CVE-2018-16393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16393",
          "url": "https://www.suse.com/security/cve/CVE-2018-16393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1108318 for CVE-2018-16393",
          "url": "https://bugzilla.suse.com/1108318"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:59:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16393"
    },
    {
      "cve": "CVE-2018-16418",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16418"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16418",
          "url": "https://www.suse.com/security/cve/CVE-2018-16418"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107039 for CVE-2018-16418",
          "url": "https://bugzilla.suse.com/1107039"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:59:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16418"
    },
    {
      "cve": "CVE-2018-16419",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16419"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16419",
          "url": "https://www.suse.com/security/cve/CVE-2018-16419"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107107 for CVE-2018-16419",
          "url": "https://bugzilla.suse.com/1107107"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:59:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16419"
    },
    {
      "cve": "CVE-2018-16422",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16422"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16422",
          "url": "https://www.suse.com/security/cve/CVE-2018-16422"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107038 for CVE-2018-16422",
          "url": "https://bugzilla.suse.com/1107038"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:59:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16422"
    },
    {
      "cve": "CVE-2018-16423",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16423"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16423",
          "url": "https://www.suse.com/security/cve/CVE-2018-16423"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107037 for CVE-2018-16423",
          "url": "https://bugzilla.suse.com/1107037"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:59:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16423"
    },
    {
      "cve": "CVE-2018-16427",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16427"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16427",
          "url": "https://www.suse.com/security/cve/CVE-2018-16427"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107033 for CVE-2018-16427",
          "url": "https://bugzilla.suse.com/1107033"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Desktop 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:opensc-devel-0:0.11.6-5.27.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:59:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16427"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.