Skip to content

Security: smartcardservices/smartcardservices.github.io

Security

security.md

title Product Security

{:.lead} Whenever there are security issues found with components managed under this project, we want to identify, analyze, develop a patch, test and report the issue to the smart card services community.

Security Updates

SCS Security Update ID Platform Support Release Date
SCSSU-201801 10.6–10.13 Source: May 28, 2018 ; Installer:PENDING
SCSSU-201401 10.6–10.9 January 13, 2014

Security Updates - Details

SCSSU-201801

CVE-2018-4300

  • Title: Stack based buffer overflow in CACRecord.cpp
  • Project Issue: 155
  • Credit: X41 D-Sec GmbH, Eric Sesterhenn

CVE-2018-4301

  • Title: Stack based buffer overflow in GemaltoKeyHandle.cpp
  • Project Issue: 155
  • Credit: X41 D-Sec GmbH, Eric Sesterhenn

References

SCSSU-201401

CVE-2013-1867

  • Title: tokend - privacy leak & arbitrary file creation
  • Project Issue: 108

References

There aren't any published security advisories