Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
200
security advisorybug fixinteger overflowScientific Linux: SLSA-2013:1323-1 Low: Ccid Smart Card Security Update
Low: ccid security and bug fix update. Date: Thu, 10 Oct 2013 20:22:28 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Low: ccid on SL5.x i386/x86_64 MIME-Version: 1.0 Synopsis: Low: ccid security and bug fix update Advisory ID: SLSA-2013:1323-1 Issue Date: 2013-09-30 CVE Numbers: CVE-2010-4530 -- An integer overflow, leading to an array index error, was found in the way the CCID driver processed a smart card's serial number. A local attacker could use this flaw to execute arbitrary code with the privileges of the user running the PC/SC Lite pcscd daemon (root, by default), by inserting a specially-crafted smart card. (CVE-2010-4530) This update also fixes the following bug: * The pcscd service failed to read from the SafeNet Smart Card 650 v1 when it was inserted into a smart card reader. The operation failed with a "IFDHPowerICC() PowerUp failed" error message. This was due to the card taking a long time to respond with a full Answer To Reset (ATR) request, which lead to a timeout, causing the card to fail to power up. This update increases the timeout value so that the aforementioned request is processed properly, and the card is powered on as expected. -- SL5 x86_64 ccid-1.3.8-2.el5.x86_64.rpm ccid-debuginfo-1.3.8-2.el5.x86_64.rpm i386 ccid-1.3.8-2.el5.i386.rpm ccid-debuginfo-1.3.8-2.el5.i386.rpm - Scientific Linux Development Team . Ccid safety and patch enhancement targeting a minor vulnerability impacting smart cards within Scientific Linux.. Ccid Security Update, Scientific Linux Advisory, Smart Card Issue, Integer Overflow Fix. . Severity: Low. LinuxSecurity.com Team
Oct 10, 2013
•Low
Scientific Linux
200
security advisorybug fixinteger overflowScientific Linux: CVE-2010-4530 Low: Ccid Integer Overflow Risk
Low: ccid security and bug fix update. Date: Mon, 4 Mar 2013 13:10:11 -0600 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: Security ERRATA Low: ccid on SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Low: ccid security and bug fix update Issue Date: 2013-02-21 CVE Numbers: CVE-2010-4530 -- An integer overflow, leading to an array index error, was found in the way the CCID driver processed a smart card's serial number. A local attacker could use this flaw to execute arbitrary code with the privileges of the user running the PC/SC Lite pcscd daemon (root, by default), by inserting a specially-crafted smart card. (CVE-2010-4530) This update also fixes the following bug: * Previously, CCID only recognized smart cards with 5V power supply. With this update, CCID also supports smart cards with different power supply. -- SL6 x86_64 ccid-1.3.9-6.el6.x86_64.rpm ccid-debuginfo-1.3.9-6.el6.x86_64.rpm i386 ccid-1.3.9-6.el6.i686.rpm ccid-debuginfo-1.3.9-6.el6.i686.rpm - Scientific Linux Development Team . ccid security patch resolving an integer overflow vulnerability on Scientific Linux. Essential for those operating the daemon.. scientific linux, ccid, integer overflow, local attack, bug fix. . Severity: Low. LinuxSecurity.com Team
Mar 04, 2013
•Low
Scientific Linux
98
security advisorycode executionRed Hat Enterprise LinuxRed Hat 6 RHSA-2013:0523-02 Low Impact: Ccid Code Execution Risk
An updated ccid package that fixes one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Low: ccid security and bug fix update Advisory ID: RHSA-2013:0523-02 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2013:0523.html Issue date: 2013-02-21 CVE Names: CVE-2010-4530 ==================================================================== 1. Summary: An updated ccid package that fixes one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 3. Description: Chip/Smart Card Interface Devices (CCID) is a USB smart card reader standard followed by most modern smart card readers. The ccid package provides a Generic, USB-based CCID driver for readers, which follow this standard. An integer overflow, leading to an array index error, was found in the way the CCID driver processed a smart card's serial number. A local attacker could use this flaw to execute arbitrary code with the privileges of the user running the PC/SC Lite pcscd daemon (root, by default), by inserting a specially-crafted smart card. (CVE-2010-4530) This update also fixes the following bug: *Previously, CCID only recognized smart cards with 5V power supply. With this update, CCID also supports smart cards with different power supply. (BZ#808115) All users of ccid are advised to upgrade to this updated package, which contains backported patches to correct these issues. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 664986 - CVE-2010-4530 CCID: Integer overflow, leading to array index error when processing crafted serial number of certain cards 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: i386: ccid-1.3.9-6.el6.i686.rpm ccid-debuginfo-1.3.9-6.el6.i686.rpm x86_64: ccid-1.3.9-6.el6.x86_64.rpm ccid-debuginfo-1.3.9-6.el6.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: x86_64: ccid-1.3.9-6.el6.x86_64.rpm ccid-debuginfo-1.3.9-6.el6.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: i386: ccid-1.3.9-6.el6.i686.rpm ccid-debuginfo-1.3.9-6.el6.i686.rpm ppc64: ccid-1.3.9-6.el6.ppc64.rpm ccid-debuginfo-1.3.9-6.el6.ppc64.rpm x86_64: ccid-1.3.9-6.el6.x86_64.rpm ccid-debuginfo-1.3.9-6.el6.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: i386: ccid-1.3.9-6.el6.i686.rpm ccid-debuginfo-1.3.9-6.el6.i686.rpm x86_64: ccid-1.3.9-6.el6.x86_64.rpm ccid-debuginfo-1.3.9-6.el6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2010-4530 https://access.redhat.com/security/updates/classification/#low 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2013 Red Hat,Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFRJcPwXlSAg2UNWIIRAodxAKCRdQ54TB4ziCl4tsM8EJd+YycfPACfSS72 4Yfrr24YtoQwavSEM3qx8sg=B2bg -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Feb 21, 2013
•Low
Red Hat
98
security advisoryred hatinteger overflowRed Hat: RHSA-2013:0523-02 Low: CCID Integer Overflow Threat
An updated ccid package that fixes one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Low: ccid security and bug fix update Advisory ID: RHSA-2013:0523-02 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2013:0523.html Issue date: 2013-02-21 CVE Names: CVE-2010-4530 ==================================================================== 1. Summary: An updated ccid package that fixes one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 3. Description: Chip/Smart Card Interface Devices (CCID) is a USB smart card reader standard followed by most modern smart card readers. The ccid package provides a Generic, USB-based CCID driver for readers, which follow this standard. An integer overflow, leading to an array index error, was found in the way the CCID driver processed a smart card's serial number. A local attacker could use this flaw to execute arbitrary code with the privileges of the user running the PC/SC Lite pcscd daemon (root, by default), by inserting a specially-crafted smart card. (CVE-2010-4530) This update also fixes the following bug: * Previously, CCID only recognized smart cards with 5V power supply. With this update, CCID also supports smart cardswith different power supply. (BZ#808115) All users of ccid are advised to upgrade to this updated package, which contains backported patches to correct these issues. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 664986 - CVE-2010-4530 CCID: Integer overflow, leading to array index error when processing crafted serial number of certain cards 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: i386: ccid-1.3.9-6.el6.i686.rpm ccid-debuginfo-1.3.9-6.el6.i686.rpm x86_64: ccid-1.3.9-6.el6.x86_64.rpm ccid-debuginfo-1.3.9-6.el6.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: x86_64: ccid-1.3.9-6.el6.x86_64.rpm ccid-debuginfo-1.3.9-6.el6.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: i386: ccid-1.3.9-6.el6.i686.rpm ccid-debuginfo-1.3.9-6.el6.i686.rpm ppc64: ccid-1.3.9-6.el6.ppc64.rpm ccid-debuginfo-1.3.9-6.el6.ppc64.rpm x86_64: ccid-1.3.9-6.el6.x86_64.rpm ccid-debuginfo-1.3.9-6.el6.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: i386: ccid-1.3.9-6.el6.i686.rpm ccid-debuginfo-1.3.9-6.el6.i686.rpm x86_64: ccid-1.3.9-6.el6.x86_64.rpm ccid-debuginfo-1.3.9-6.el6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2010-4530 https://access.redhat.com/security/updates/classification#low 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2013 Red Hat, Inc. . RHEL CCID update provides enhancements to address minor security vulnerabilities alongside various bug fixes,accompanied by comprehensive instructions.. ccid security fix, red hat advisory, integer overflow, smart card, low severity issue. . Severity: Low. LinuxSecurity.com Team
Feb 21, 2013
•Low
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!