CVE-2016-10109 Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the....
HighCVSS 7.5
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pcsc-lite(Debian:12) | < 1.8.20-1 | 1.8.20-1 |
| debian/pcsc-lite(Debian:13) | < 1.8.20-1 | 1.8.20-1 |
| debian/pcsc-lite(Debian:14) | < 1.8.20-1 | 1.8.20-1 |
| muscle pcsc-lite | <= 1.8.19 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.10 | No fix listed |
References
- Debian Security Tracker CVE-2016-10109 vendor-advisory
- DSA-3752 vendor-advisory
- [oss-security] 20170103 Re: CVE Request: pcsc-lite use-after-free and double-free mailing-list third-party-advisory
- 95263 vdb-entry
- USN-3176-1 third-party-advisory vendor-advisory
- [pcsclite-muscle] 20161226 New pcsc-lite 1.8.20 mailing-list vendor-advisory
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list
- salsa.debian.org
- GLSA-201702-01 vendor-advisory