An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade p11-kit-serverUpgrade p11-kitUpgrade p11-kit-trustUpgrade p11-kit-devel | May 4, 2022 | Dec 16, 2020 |
| Alpine Linux | — | Upgrade p11-kit | Mar 26, 2024 | Dec 16, 2020 |
| Amazon Linux Ami 2 | — | Upgrade p11-kit-develUpgrade p11-kit-serverUpgrade p11-kit-trustUpgrade p11-kitUpgrade p11-kit-debuginfo | Feb 22, 2021 | Dec 16, 2020 |
| Centos_linux | — | Upgrade p11-kit-trust-debuginfoUpgrade p11-kit-trustUpgrade p11-kit-develUpgrade p11-kitUpgrade p11-kit-serverUpgrade p11-kit-debugsourceUpgrade p11-kit-server-debuginfoUpgrade p11-kit-debuginfo | Jun 1, 2021 | Dec 16, 2020 |
| Debian | — | Upgrade p11-kit | Jan 4, 2021 | Dec 16, 2020 |
| Freebsd | — | Upgrade p11-kit | Dec 13, 2020 | Dec 12, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade p11-kitUpgrade p11-kit-trustUpgrade p11-kit-devel | Feb 22, 2021 | Dec 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade p11-kit-develUpgrade p11-kitUpgrade p11-kit-trust | Jan 20, 2021 | Dec 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade p11-kit-develUpgrade p11-kit-trustUpgrade p11-kit | Mar 24, 2021 | Dec 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade p11-kit-trustUpgrade p11-kit-develUpgrade p11-kitUpgrade p11-kit-server | Feb 2, 2021 | Dec 16, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade p11-kit-trustUpgrade p11-kit | Jan 5, 2021 | Dec 16, 2020 |
| Oracle Solaris | — | Upgrade library/desktop/p11-kit to version 0.23.22-11.4.36.0.1.101.0 on Solaris 11.4 | Aug 27, 2021 | Dec 16, 2020 |
| Oracle_linux | — | Upgrade p11-kit-trustUpgrade p11-kit-serverUpgrade p11-kitUpgrade p11-kit-devel | May 26, 2021 | Dec 12, 2020 |
| Redhat_linux | — | Upgrade p11-kit-trustUpgrade p11-kit-debugsourceUpgrade p11-kit-develUpgrade p11-kitUpgrade p11-kit-server-debuginfoUpgrade p11-kit-trust-debuginfoNo solution existsUpgrade p11-kit-debuginfoUpgrade p11-kit-server | May 21, 2021 | Dec 16, 2020 |
| Rocky_linux | — | Upgrade p11-kit-server-debuginfoUpgrade p11-kit-serverUpgrade p11-kit-trust-debuginfoUpgrade p11-kit-trustUpgrade p11-kit-debuginfoUpgrade p11-kit-debugsourceUpgrade p11-kit-develUpgrade p11-kit | Mar 12, 2024 | Dec 16, 2020 |
| Suse | — | Upgrade samba-libs-python3-32bitUpgrade sssdUpgrade python-sssd-configUpgrade p11-kit-32bitUpgrade p11-kit-develUpgrade apache2-mod_apparmorUpgrade p11-kit-nss-trust-32bitUpgrade samba-client-libsUpgrade libipa_hbac0Upgrade sssd-proxyUpgrade libgnutls30Upgrade samba-winbind-libs-32bitUpgrade samba-python3Upgrade apparmor-parserUpgrade libapparmor-develUpgrade samba-libs-python3Upgrade p11-kit-toolsUpgrade libsss_nss_idmap0Upgrade sssd-toolsUpgrade p11-kitUpgrade samba-docUpgrade sssd-ldapUpgrade libhogweed4Upgrade sssd-adUpgrade samba-ldb-ldapUpgrade libgnutls30-32bitUpgrade pam_apparmor-32bitUpgrade libp11-kit0Upgrade libsss_idmap0Upgrade sssd-krb5-commonUpgrade samba-toolUpgrade sssd-ipaUpgrade libnettle6Upgrade libsss_idmap-develUpgrade samba-winbind-libsUpgrade samba-winbindUpgrade libapparmor1-32bitUpgrade libsamba-policy0-python3Upgrade samba-libsUpgrade sssd-dbusUpgrade libipa_hbac-develUpgrade sambaUpgrade perl-apparmorUpgrade ca-certificatesUpgrade pam_apparmorUpgrade libhogweed4-32bitUpgrade samba-clientUpgrade samba-client-libs-32bitUpgrade samba-libs-32bitUpgrade apparmor-utilsUpgrade libp11-kit0-32bitUpgrade sssd-krb5Upgrade libapparmor1Upgrade p11-kit-nss-trustUpgrade libsss_certmap0Upgrade libnettle6-32bitUpgrade apparmor-profilesUpgrade samba-develUpgrade sssd-commonUpgrade ctdbUpgrade libsamba-policy-develUpgrade samba-client-32bitUpgrade yast2-samba-clientUpgrade libsamba-policy-python3-develUpgrade apparmor-docsUpgrade samba-devel-32bitUpgrade libsss_simpleifp0Upgrade libsss_nss_idmap-develUpgrade libsamba-policy0-python3-32bit | Dec 23, 2021 | Dec 12, 2020 |
| Ubuntu | — | Upgrade p11-kit (Ubuntu Pro)Upgrade libp11-kit0Upgrade p11-kit-modules (Ubuntu Pro)Upgrade p11-kitUpgrade p11-kit-modulesUpgrade libp11-kit0 (Ubuntu Pro) | Jan 6, 2021 | Dec 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub