CVE-2017-6414

Memory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service (host memory consumption) via vectors related to allocating a new APDU object.

• CWE-772

• http://www.openwall.com/lists/oss-security/2017/03/01/11Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/96541Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:2408Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1427833Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://cgit.freedesktop.org/spice/libcacard/commit/?id=9113dc6a303604a2d9812ac70c17d076ef11886cPatch, Third Party Advisory
• https://cgit.freedesktop.org/spice/libcacard/tree/NEWS?id=aaa5251791bf0b1640afcba77a7d79ea23c42d53Release Notes, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/03/01/11Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/96541Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:2408Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1427833Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://cgit.freedesktop.org/spice/libcacard/commit/?id=9113dc6a303604a2d9812ac70c17d076ef11886cPatch, Third Party Advisory
• https://cgit.freedesktop.org/spice/libcacard/tree/NEWS?id=aaa5251791bf0b1640afcba77a7d79ea23c42d53Release Notes, Third Party Advisory

Published

Mar 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6408An issue was discovered in Veritas NetBackup 8.0 and earlier…
• CVE-2017-6409An issue was discovered in Veritas NetBackup 8.0 and earlier…
• CVE-2017-6410kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.…
• CVE-2017-6411Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_…
• CVE-2017-6412In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixati…
• CVE-2017-6413The "OpenID Connect Relying Party and OAuth 2.0 Resource Ser…
• CVE-2017-6415The dex_parse_debug_item function in libr/bin/p/bin_dex.c in…5.5
• CVE-2017-6416An issue was discovered in SysGauge 1.5.18. A buffer overflo…
• CVE-2017-6417Code injection vulnerability in Avira Total Security Suite 1…
• CVE-2017-6418libclamav/message.c in ClamAV 0.99.2 allows remote attackers…
• CVE-2017-6419mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.…
• CVE-2017-6420The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99…