[SECURITY] Fedora 24 Update: pcsc-lite-1.8.20-1.fc24

The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...

Fedora Update for pcsc-lite FEDORA-2017-8311440c55

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-778-1 : pcsc-lite security update

It was discovered that there was a use-after-free and double-free vulnerability in pcsc-lite, a library to access smart cards that use the WindowsR SCard interface 'PC/SC'. For Debian 7 'Wheezy', this issue has been fixed in pcsc-lite version 1.8.4-1+deb7u2. We recommend that you upgrade your...

Fedora Update for pcsc-lite FEDORA-2017-1a7b8c0730

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : Use-After-Free Vulnerability in pcsc-lite (c218873d-d444-11e6-84ef-f0def167eeea)

Peter Wu on Openwall mailing-list reports : The issue allows a local attacker to cause a Denial of Service, but can potentially result in Privilege Escalation since the daemon is running as root. while any local user can connect to the Unix socket. Fixed by patch which is released with hpcsc-lite...

Fedora 25 : pcsc-lite (2017-1a7b8c0730)

New upstream release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] [DLA 778-1] pcsc-lite security update

Package : pcsc-lite Version : 1.8.4-1+deb7u2 CVE ID : CVE-2016-10109 It was discovered that there was a use-after-free and double-free vulnerability in pcsc-lite, a library to access smart cards that use the WindowsR SCard interface "PC/SC". For Debian 7 "Wheezy", this issue has been fixed in...

[SECURITY] Fedora 25 Update: pcsc-lite-1.8.20-1.fc25

The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...

DLA-778-1 pcsc-lite - security update

Bulletin has no description...

Debian DSA-3752-1 : pcsc-lite - security update

Peter Wu discovered that a use-after-free in the pscd PC/SC daemon of PCSC-Lite might result in denial of service or potentially privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] [DSA 3752-1] pcsc-lite security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3752-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 04, 2017 https://www.debian.org/security/faq -...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

Man In The Middle (MitM)

adamvr-geoip-lite is vulnerable to man-in-the-middle MitM attacks via downloading geoip resources over HTTP. This impacts the integrity and availability of this geoip data that may alter the decisions made by an application using this data...

DSA-3752-1 pcsc-lite - security update

Bulletin has no description...

Debian Security Advisory DSA 3752-1 (pcsc-lite - security update)

Peter Wu discovered that a use-after-free in the pscd PC/SC daemon of PCSC-Lite might result in denial of service or potentially privilege escalation. OpenVAS Vulnerability Test $Id: deb3752.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3752-1 using nvtgen 1.0 Script...

[ASA-201701-12] pcsclite: privilege escalation

Arch Linux Security Advisory ASA-201701-12 ========================================== Severity: Medium Date : 2017-01-04 CVE-ID : CVE-2016-10109 Package : pcsclite Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-126 Summary ======= The package pcsclite before...

WordPress plugin wp-ad-guru-lite suffers from a reflected cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A reflective cross-site scripting vulnerability exists in the wordpress plugin wp-ad-guru-lite 'optionsPage.php' page, which can be exploited by attackers to...

Debian: Security Advisory (DSA-3752-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

PT-2016-4579

Name of the Vulnerable Software and Affected Versions pcsc-lite versions prior to 1.8.20 Description The issue allows remote attackers to cause a denial of service crash through a command that uses cardsList after the handle has been released through the SCardReleaseContext function. This is a...