Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Debian 1.4.110-1 DSA-2178-2 Major: pcscd Memory Leak Issue

debian
Calendar Grey January 31, 2011
Debian Logo
Debian Security Advisory DSA-2156-2: severe vulnerability found in pcscd poses potential risk for unauthorized smart card manipulation.
MWR InfoSecurity identified a buffer overflow in pcscd, middleware to access a smart card via PC/SC, which could lead to the execution of arbitrary code

Summary

Package : pcscd
Vulnerability : buffer overflow
Problem type : local
Debian-specific: no
CVE ID : CVE-2010-4531

MWR InfoSecurity identified a buffer overflow in pcscd, middleware
to access a smart card via PC/SC, which could lead to the execution
of arbitrary code.

For the stable distribution (lenny), this problem has been fixed in
version 1.4.102-1+lenny4.

For the testing distribution (squeeze), this problem has been fixed in
version 1.5.5-4.

For the unstable distribution (sid), this problem has been fixed in
version 1.5.5-4.

We recommend that you upgrade your pcscd packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/





Severity
critical
Lowest
Low
Medium
High
Critical

Package: pcscd
CVE ID: CVE-2010-4531

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here