Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsLis...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 pcsc-lite

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20-1"}]}]

Debian:13 pcsc-lite

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20-1"}]}]

Debian:14 pcsc-lite

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20-1"}]}]

参照URL

advisory security-tracker.debian.org