Mageia: Security Advisory (MGASA-2017-0460)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the program tools and libraries used for working with OpenSC smart cards involves improper memory release before deleting the last pointer, allowing a malicious actor to cause a service failure.

The vulnerability of the programmatic tools and libraries used to work with OpenSC smart cards is related to improper memory release before deleting the last references. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file.

...

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.

...

[SECURITY] [DLA 2832-1] opensc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2832-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 29, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2832-1 : opensc - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2832 advisory. - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c. CVE-2019-15945 - OpenSC before 0.20.0-rc1 has ...

Rdesktop - Open Source Client for Microsoft's RDP protocol

rdesktop is an open source client for Microsoft's RDP protocol. It is known to work with Windows versions ranging from NT 4 Terminal Server to Windows 2012 R2 RDS. rdesktop currently has implemented the RDP version 4 and 5 protocols. Installation rdesktop uses a GNU-style build procedure. Typical...

ALBA-2021:3049 pcsc-lite bug fix and enhancement update

PC/SC Lite provides a Windows SCard compatible interface for communicating with smart cards, smart card readers, and other security tokens. Bug Fixes: Increase global reader array size to 48 to address issue with RHCS secure channel creation BZ1972569 Increase global reader array size to 48 to...

August 10, 2021—KB5005099 (Monthly Rollup)

None None...

August 10, 2021—KB5005095 (Security-only update)

None None...

August 10, 2021—KB5005094 (Security-only update)

None None...

August 10, 2021—KB5005106 (Security-only update)

None None...

August 10, 2021—KB5005076 (Monthly Rollup)

None None...

August 10, 2021—KB5005089 (Security-only update)

None None...

August 10, 2021—KB5005088 (Monthly Rollup)

None None...

August 10, 2021—KB5005090 (Monthly Rollup)

None None...

Dell Wyse ThinOS 日志信息泄露漏洞

Wyse ThinOS is a specialized operating system for Dell servers from Dell Inc. in the United States. A security vulnerability exists in Wyse ThinOS, which arises from an authenticated attacker with physical access to the system being able to read sensitive smart card data in log files...

PT-2023-12250 · Opensc +1 · Opensc +1

Name of the Vulnerable Software and Affected Versions: OpenSC smart card middleware versions prior to 0.23 Description: A stack overflow issue exists in the OpenSC smart card middleware due to crafted responses to APDUs, which can lead to a stack overflow. Recommendations: For versions prior to...

July 29, 2021—KB5005393 (OS Build 14393.4532) Out-of-band

None None...

KB5005390: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows Server 2008 SP2

KB5005390: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows Server 2008 SP2 Summary This update addresses the following issue: Temporarily addresses an issue with devices that do not comply with section 3.2.1 of the RFC 4556 specification,...