CVE-2020-29363
16.12.2020, 14:15
An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CK_ATTRIBUTE, the receiving entity may not allocate sufficient length for the buffer to store the deserialized value.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| p11-kit_project | p11-kit | 0.23.6 ≤ 𝑥 < 0.23.22 |
| debian | debian_linux | 10.0 |
| oracle | communications_cloud_native_core_policy | 1.14.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libp11-kit0 |
| ||||||||||||||||||||||||
| libp11-kit0-32bit |
| ||||||||||||||||||||||||
| p11-kit |
| ||||||||||||||||||||||||
| p11-kit-devel |
| ||||||||||||||||||||||||
| p11-kit-nss-trust |
| ||||||||||||||||||||||||
| p11-kit-server |
| ||||||||||||||||||||||||
| p11-kit-tools |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References