EulerOS 2.0 SP5 : pcsc-lite (EulerOS-SA-2019-2545)

According to the version of the pcsc-lite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses...

EulerOS 2.0 SP2 : pcsc-lite (EulerOS-SA-2019-2474)

According to the version of the pcsc-lite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/S...

Fedora Update for pcsc-lite FEDORA-2019-c308ad8ee5

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 30 : pcsc-lite (2019-fc4bac128f)

New upstream release including the security fix and enabling autostart of the service upon install Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 29 : pcsc-lite (2019-c308ad8ee5)

New upstream release including the security fix and enabling autostart of the service upon install Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

[SECURITY] Fedora 30 Update: pcsc-lite-1.8.25-1.fc30

The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...

Denial Of Service (DoS)

pcsc-lite is vulnerable to denial of service DoS attacks. The vulnerability exists as Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset ATR Handler atrhandler.c for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate...

Arbitrary Code Execution

ccid is vulnerable to arbitrary code execution attacks. The vulnerability exists as a signedness error in ccidserial.c in libccid in the USB Chip/Smart Card Interface Devices CCID driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to...

Design/Logic Flaw

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

DEBIAN-CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

CVE-2016-10109

Affected software: pcsc-lite (PC/SC middleware). Vulnerability: a use-after-free of the internal cardsList after the handle is released via SCardReleaseContext, potentially enabling a crash or denial of service. Impact: denial of service (crash); additional disclosures on privilege escalation wer...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

PCSC-Lite: Multiple vulnerabilities

Background PCSC-Lite is a middleware to access a smart card using the SCard API PC/SC. Description The SCardReleaseContext function normally releases resources associated with the given handle including “cardsList” and clients should cease using this handle. However, a malicious client can make t...

GLSA-201702-01 : PCSC-Lite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-01 PCSC-Lite: Multiple vulnerabilities The SCardReleaseContext function normally releases resources associated with the given handle including cardsList and clients should cease using this handle. However, a malicious clien...

MGASA-2017-0026 Updated pcsc-lite packages fix security vulnerability

Once MSGRemoveContext is invoked via SCARDRELEASECONTEXT, cardsList is freed. A repeated invocation of SCARDRELEASECONTEXT with an empty context handle results in a use-after-free followed by a double-free. After MSGRemoveContext, invocation of SCardEstablishContext enable further use-after-free ...

Updated pcsc-lite packages fix security vulnerability

Once MSGRemoveContext is invoked via SCARDRELEASECONTEXT, cardsList is freed. A repeated invocation of SCARDRELEASECONTEXT with an empty context handle results in a use-after-free followed by a double-free. After MSGRemoveContext, invocation of SCardEstablishContext enable further use-after-free ...

SUSE SLED12 / SLES12 Security Update : pcsc-lite (SUSE-SU-2017:0286-1)

pcsc-lite was updated to fix one security issue. This security issue was fixed : - CVE-2016-10109: This use-after-free and double-free issue allowed local attacker to cause a Denial of Service and possible privilege escalation bsc1017902. Note that Tenable Network Security has extracted the...