CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
musclepcsc-lite
𝑥
≤ 1.8.19
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
16.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
pcsc-lite
bullseye
1.9.1-1
fixed
bookworm
1.9.9-2
fixed
trixie
2.3.0-2
fixed
sid
2.3.0-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
pcsc-lite
zesty
Fixed 1.8.14-1ubuntu2
released
yakkety
Fixed 1.8.14-1ubuntu1.16.10.1
released
xenial
Fixed 1.8.14-1ubuntu1.16.04.1
released
trusty
Fixed 1.8.10-1ubuntu1.1
released
precise
Fixed 1.7.4-2ubuntu2.1
released