Summary
Peter Wu discovered that the PC/SC service did not correctly handle certain
resources. A local attacker could use this issue to cause PC/SC to crash,
resulting in a denial of service, or possibly execute arbitrary code with
root privileges.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | pcsc-lite | 1.8.10-1ubuntu1.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | pcsc-lite | 1.8.14-1ubuntu1.16.04.1 |
Vulnerabilities 1
-
Unscored —
Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) vi…
References
-
report
https://ubuntu.com/security/CVE-2016-10109