ccid-1.3.9-6.AXS4
エラータID: AXSA:2013-120:01
リリース日:
2013/03/06 Wednesday - 12:31
題名:
ccid-1.3.9-6.AXS4
影響のあるチャネル:
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- USB Chip/Smart Card Interface Devices (CCID) ドライバの libccid の ccid_serial.c には Signedness エラーが存在し，巧妙に細工されたシリアルナンバーを含むスマートカードによって，物理的に近接している攻撃者が任意のコードを実行する脆弱性があります。 (CVE-2010-4530)
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2010-4530
Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negative value to be used in a memcpy operation, which triggers a buffer overflow. NOTE: some sources refer to this issue as an integer overflow.
Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negative value to be used in a memcpy operation, which triggers a buffer overflow. NOTE: some sources refer to this issue as an integer overflow.
追加情報:
N/A
ダウンロード:
SRPMS
- ccid-1.3.9-6.AXS4.src.rpm
MD5: 24540172c369b3360db3533d83b02d3c
SHA-256: 2f05f0f95616c7584e26799ec89627f3d090350aaa32635c8d9de5fb81d3c84c
Size: 391.96 kB
Asianux Server 4 for x86
- ccid-1.3.9-6.AXS4.i686.rpm
MD5: cfa65c055a3e22038d842de95aeea582
SHA-256: 289c06f509c49a33f8e5a78ea835213f57758aa8e95d995a85a30f9f1ca9acd5
Size: 118.73 kB
Asianux Server 4 for x86_64
- ccid-1.3.9-6.AXS4.x86_64.rpm
MD5: efcd3e1c279c0063891235492a9dfe8a
SHA-256: 56db76f293bcf7ff8013fe1e40e73ab7ff9b767d49d59368a13b163ab47acb33
Size: 119.76 kB