SUSE-SU-2018:3629-1

Vulnerability from csaf_suse - Published: 2018-11-05 16:57 - Updated: 2026-09-20 12:59
Summary
Security update for opensc
Severity
Moderate
Notes
Title of the patch: Security update for opensc
Description of the patch: This update for opensc fixes the following security issues: - CVE-2018-16391: Fixed a denial of service when handling responses from a Muscle Card (bsc#1106998) - CVE-2018-16392: Fixed a denial of service when handling responses from a TCOS Card (bsc#1106999) - CVE-2018-16393: Fixed buffer overflows when handling responses from Gemsafe V1 Smartcards (bsc#1108318) - CVE-2018-16418: Fixed buffer overflow when handling string concatenation in util_acl_to_str (bsc#1107039) - CVE-2018-16419: Fixed several buffer overflows when handling responses from a Cryptoflex card (bsc#1107107) - CVE-2018-16420: Fixed buffer overflows when handling responses from an ePass 2003 Card (bsc#1107097) - CVE-2018-16421: Fixed buffer overflows when handling responses from a CAC Card (bsc#1107049) - CVE-2018-16422: Fixed single byte buffer overflow when handling responses from an esteid Card (bsc#1107038) - CVE-2018-16423: Fixed double free when handling responses from a smartcard (bsc#1107037) - CVE-2018-16424: Fixed double free when handling responses in read_file (bsc#1107036) - CVE-2018-16425: Fixed double free when handling responses from an HSM Card (bsc#1107035) - CVE-2018-16426: Fixed endless recursion when handling responses from an IAS-ECC card (bsc#1107034) - CVE-2018-16427: Fixed out of bounds reads when handling responses in OpenSC (bsc#1107033)
Patchnames: SUSE-SLE-Module-Basesystem-15-2018-2581
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2018-16391
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2018-16392
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16393
4.3 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16418
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16419
4.3 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16420
4.3 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16421
4.3 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16422
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16423
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16424
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16425
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16426
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
CVE-2018-16427
4.6 (Medium)
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 20 products, the same list as for CVE-2018-16391
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://www.suse.com/support/update/announcement/… self
https://bugzilla.suse.com/1104812 self
https://bugzilla.suse.com/1106998 self
https://bugzilla.suse.com/1106999 self
https://bugzilla.suse.com/1107033 self
https://bugzilla.suse.com/1107034 self
https://bugzilla.suse.com/1107035 self
https://bugzilla.suse.com/1107036 self
https://bugzilla.suse.com/1107037 self
https://bugzilla.suse.com/1107038 self
https://bugzilla.suse.com/1107039 self
https://bugzilla.suse.com/1107049 self
https://bugzilla.suse.com/1107097 self
https://bugzilla.suse.com/1107107 self
https://bugzilla.suse.com/1108318 self
https://www.suse.com/security/cve/CVE-2018-16391/ self
https://www.suse.com/security/cve/CVE-2018-16392/ self
https://www.suse.com/security/cve/CVE-2018-16393/ self
https://www.suse.com/security/cve/CVE-2018-16418/ self
https://www.suse.com/security/cve/CVE-2018-16419/ self
https://www.suse.com/security/cve/CVE-2018-16420/ self
https://www.suse.com/security/cve/CVE-2018-16421/ self
https://www.suse.com/security/cve/CVE-2018-16422/ self
https://www.suse.com/security/cve/CVE-2018-16423/ self
https://www.suse.com/security/cve/CVE-2018-16424/ self
https://www.suse.com/security/cve/CVE-2018-16425/ self
https://www.suse.com/security/cve/CVE-2018-16426/ self
https://www.suse.com/security/cve/CVE-2018-16427/ self
https://www.suse.com/security/cve/CVE-2018-16391 external
https://bugzilla.suse.com/1106998 external
https://www.suse.com/security/cve/CVE-2018-16392 external
https://bugzilla.suse.com/1106999 external
https://www.suse.com/security/cve/CVE-2018-16393 external
https://bugzilla.suse.com/1108318 external
https://www.suse.com/security/cve/CVE-2018-16418 external
https://bugzilla.suse.com/1107039 external
https://www.suse.com/security/cve/CVE-2018-16419 external
https://bugzilla.suse.com/1107107 external
https://www.suse.com/security/cve/CVE-2018-16420 external
https://bugzilla.suse.com/1107097 external
https://www.suse.com/security/cve/CVE-2018-16421 external
https://bugzilla.suse.com/1107049 external
https://www.suse.com/security/cve/CVE-2018-16422 external
https://bugzilla.suse.com/1107038 external
https://www.suse.com/security/cve/CVE-2018-16423 external
https://bugzilla.suse.com/1107037 external
https://www.suse.com/security/cve/CVE-2018-16424 external
https://bugzilla.suse.com/1107036 external
https://www.suse.com/security/cve/CVE-2018-16425 external
https://bugzilla.suse.com/1107035 external
https://www.suse.com/security/cve/CVE-2018-16426 external
https://bugzilla.suse.com/1107034 external
https://www.suse.com/security/cve/CVE-2018-16427 external
https://bugzilla.suse.com/1107033 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for opensc",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for opensc fixes the following security issues:\n\n- CVE-2018-16391: Fixed a denial of service when handling responses from a Muscle Card (bsc#1106998)\n- CVE-2018-16392: Fixed a denial of service when handling responses from a TCOS Card (bsc#1106999)\n- CVE-2018-16393: Fixed buffer overflows when handling responses from Gemsafe V1 Smartcards (bsc#1108318)\n- CVE-2018-16418: Fixed buffer overflow when handling string concatenation in util_acl_to_str (bsc#1107039)\n- CVE-2018-16419: Fixed several buffer overflows when handling responses from a Cryptoflex card (bsc#1107107)\n- CVE-2018-16420: Fixed buffer overflows when handling responses from an ePass 2003 Card (bsc#1107097)\n- CVE-2018-16421: Fixed buffer overflows when handling responses from a CAC Card (bsc#1107049)\n- CVE-2018-16422: Fixed single byte buffer overflow when handling responses from an esteid Card (bsc#1107038)\n- CVE-2018-16423: Fixed double free when handling responses from a smartcard (bsc#1107037)\n- CVE-2018-16424: Fixed double free when handling responses in read_file (bsc#1107036)\n- CVE-2018-16425: Fixed double free when handling responses from an HSM Card (bsc#1107035)\n- CVE-2018-16426: Fixed endless recursion when handling responses from an IAS-ECC card (bsc#1107034)\n- CVE-2018-16427: Fixed out of bounds reads when handling responses in OpenSC (bsc#1107033)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Module-Basesystem-15-2018-2581",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3629-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2018:3629-1",
        "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183629-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2018:3629-1",
        "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20183629-1.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1104812",
        "url": "https://bugzilla.suse.com/1104812"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1106998",
        "url": "https://bugzilla.suse.com/1106998"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1106999",
        "url": "https://bugzilla.suse.com/1106999"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107033",
        "url": "https://bugzilla.suse.com/1107033"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107034",
        "url": "https://bugzilla.suse.com/1107034"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107035",
        "url": "https://bugzilla.suse.com/1107035"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107036",
        "url": "https://bugzilla.suse.com/1107036"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107037",
        "url": "https://bugzilla.suse.com/1107037"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107038",
        "url": "https://bugzilla.suse.com/1107038"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107039",
        "url": "https://bugzilla.suse.com/1107039"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107049",
        "url": "https://bugzilla.suse.com/1107049"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107097",
        "url": "https://bugzilla.suse.com/1107097"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1107107",
        "url": "https://bugzilla.suse.com/1107107"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1108318",
        "url": "https://bugzilla.suse.com/1108318"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16391 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16391/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16392 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16392/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16393 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16393/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16418 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16418/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16419 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16419/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16420 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16420/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16421 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16421/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16422 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16422/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16423 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16423/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16424 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16424/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16425 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16425/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16426 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16426/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16427 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16427/"
      }
    ],
    "title": "Security update for opensc",
    "tracking": {
      "current_release_date": "2026-09-20T12:59:47Z",
      "generator": {
        "date": "2018-11-05T16:57:43Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2018:3629-1",
      "initial_release_date": "2018-11-05T16:57:43Z",
      "revision_history": [
        {
          "date": "2018-11-05T16:57:43Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T12:59:47Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.18.0-3.8.1.aarch64",
                "product": {
                  "name": "opensc-0:0.18.0-3.8.1.aarch64",
                  "product_id": "opensc-0:0.18.0-3.8.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.18.0-3.8.1?arch=aarch64\u0026upstream=opensc-0:0.18.0-3.8.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.18.0-3.8.1.ppc64le",
                "product": {
                  "name": "opensc-0:0.18.0-3.8.1.ppc64le",
                  "product_id": "opensc-0:0.18.0-3.8.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.18.0-3.8.1?arch=ppc64le\u0026upstream=opensc-0:0.18.0-3.8.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.18.0-3.8.1.s390x",
                "product": {
                  "name": "opensc-0:0.18.0-3.8.1.s390x",
                  "product_id": "opensc-0:0.18.0-3.8.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.18.0-3.8.1?arch=s390x\u0026upstream=opensc-0:0.18.0-3.8.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.18.0-3.8.1.x86_64",
                "product": {
                  "name": "opensc-0:0.18.0-3.8.1.x86_64",
                  "product_id": "opensc-0:0.18.0-3.8.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.18.0-3.8.1?arch=x86_64\u0026upstream=opensc-0:0.18.0-3.8.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15",
                  "product_id": "SUSE Linux Enterprise Server 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 15",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 15",
                  "product_id": "SUSE Linux Enterprise Desktop 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc:15"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.18.0-3.8.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64"
        },
        "product_reference": "opensc-0:0.18.0-3.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-16391",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16391"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16391",
          "url": "https://www.suse.com/security/cve/CVE-2018-16391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106998 for CVE-2018-16391",
          "url": "https://bugzilla.suse.com/1106998"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16391"
    },
    {
      "cve": "CVE-2018-16392",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16392"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16392",
          "url": "https://www.suse.com/security/cve/CVE-2018-16392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106999 for CVE-2018-16392",
          "url": "https://bugzilla.suse.com/1106999"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16392"
    },
    {
      "cve": "CVE-2018-16393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16393",
          "url": "https://www.suse.com/security/cve/CVE-2018-16393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1108318 for CVE-2018-16393",
          "url": "https://bugzilla.suse.com/1108318"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16393"
    },
    {
      "cve": "CVE-2018-16418",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16418"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16418",
          "url": "https://www.suse.com/security/cve/CVE-2018-16418"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107039 for CVE-2018-16418",
          "url": "https://bugzilla.suse.com/1107039"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16418"
    },
    {
      "cve": "CVE-2018-16419",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16419"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16419",
          "url": "https://www.suse.com/security/cve/CVE-2018-16419"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107107 for CVE-2018-16419",
          "url": "https://bugzilla.suse.com/1107107"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16419"
    },
    {
      "cve": "CVE-2018-16420",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16420"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16420",
          "url": "https://www.suse.com/security/cve/CVE-2018-16420"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107097 for CVE-2018-16420",
          "url": "https://bugzilla.suse.com/1107097"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16420"
    },
    {
      "cve": "CVE-2018-16421",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16421"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16421",
          "url": "https://www.suse.com/security/cve/CVE-2018-16421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107049 for CVE-2018-16421",
          "url": "https://bugzilla.suse.com/1107049"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16421"
    },
    {
      "cve": "CVE-2018-16422",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16422"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16422",
          "url": "https://www.suse.com/security/cve/CVE-2018-16422"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107038 for CVE-2018-16422",
          "url": "https://bugzilla.suse.com/1107038"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16422"
    },
    {
      "cve": "CVE-2018-16423",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16423"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16423",
          "url": "https://www.suse.com/security/cve/CVE-2018-16423"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107037 for CVE-2018-16423",
          "url": "https://bugzilla.suse.com/1107037"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16423"
    },
    {
      "cve": "CVE-2018-16424",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16424"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16424",
          "url": "https://www.suse.com/security/cve/CVE-2018-16424"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107036 for CVE-2018-16424",
          "url": "https://bugzilla.suse.com/1107036"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16424"
    },
    {
      "cve": "CVE-2018-16425",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16425"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16425",
          "url": "https://www.suse.com/security/cve/CVE-2018-16425"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107035 for CVE-2018-16425",
          "url": "https://bugzilla.suse.com/1107035"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16425"
    },
    {
      "cve": "CVE-2018-16426",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16426"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16426",
          "url": "https://www.suse.com/security/cve/CVE-2018-16426"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107034 for CVE-2018-16426",
          "url": "https://bugzilla.suse.com/1107034"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16426"
    },
    {
      "cve": "CVE-2018-16427",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16427"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16427",
          "url": "https://www.suse.com/security/cve/CVE-2018-16427"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1107033 for CVE-2018-16427",
          "url": "https://bugzilla.suse.com/1107033"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Desktop 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server 15:opensc-0:0.18.0-3.8.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15:opensc-0:0.18.0-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-11-05T16:57:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16427"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.