Multiple vulnerabilities have been found in PCSC-Lite, the worst of which could lead to privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/pcsc-lite | * | < 1.8.20 | >= 1.8.20 |
PCSC-Lite is a middleware to access a smart card using the SCard API (PC/SC).
The SCardReleaseContext function normally releases resources associated with the given handle (including “cardsList”) and clients should cease using this handle. However, a malicious client can make the daemon invoke SCardReleaseContext and continue issuing other commands that use “cardsList”, resulting in a use-after-free. When SCardReleaseContext is invoked multiple times it additionally results in a double-free of “cardsList”.
A local attacker could use a malicious client to connect to pcscd’s Unix socket, possibly resulting in a Denial of Service condition or privilege escalation since the daemon is running as root.
There is no known workaround at this time.
All PCSC-Lite users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/pcsc-lite-1.8.20"
A vulnerability in PCSC-Lite could result in execution of arbitrary code or Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/pcsc-lite | * | < 1.6.6 | >= 1.6.6 |
PCSC-Lite is a PC/SC Architecture smartcard middleware library.
PCSC-Lite contains a stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset Handler (atrhandler.c).
A physically proximate attacker could execute arbitrary code or cause a Denial of Service condition.
There is no known workaround at this time.
All PCSC-Lite users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/pcsc-lite-1.6.6"
NOTE: This is a legacy GLSA. Updates for all affected architectures are available since January 10, 2011. It is likely that your system is already no longer affected by this issue.