An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-p11-kitalma-upgrade-p11-kit-develalma-upgrade-p11-kit-serveralma-upgrade-p11-kit-trust | May 4, 2022 | Dec 16, 2020 | |
| Alpine Linux | alpine-linux-upgrade-p11-kit | Mar 26, 2024 | Dec 16, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-p11-kitamazon-linux-ami-2-upgrade-p11-kit-debuginfoamazon-linux-ami-2-upgrade-p11-kit-develamazon-linux-ami-2-upgrade-p11-kit-serveramazon-linux-ami-2-upgrade-p11-kit-trust | Feb 22, 2021 | Dec 16, 2020 | |
| Centos_linux | — | centos-upgrade-p11-kitcentos-upgrade-p11-kit-debuginfocentos-upgrade-p11-kit-debugsourcecentos-upgrade-p11-kit-develcentos-upgrade-p11-kit-servercentos-upgrade-p11-kit-server-debuginfocentos-upgrade-p11-kit-trustcentos-upgrade-p11-kit-trust-debuginfo | Jun 1, 2021 | Dec 16, 2020 |
| Debian | debian-upgrade-p11-kit | Jan 4, 2021 | Dec 16, 2020 | |
| Freebsd | freebsd-upgrade-package-p11-kit | Dec 13, 2020 | Dec 12, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-p11-kithuawei-euleros-2_0_sp2-upgrade-p11-kit-develhuawei-euleros-2_0_sp2-upgrade-p11-kit-trust | Feb 22, 2021 | Dec 16, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-p11-kithuawei-euleros-2_0_sp3-upgrade-p11-kit-develhuawei-euleros-2_0_sp3-upgrade-p11-kit-trust | Jan 20, 2021 | Dec 16, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-p11-kithuawei-euleros-2_0_sp5-upgrade-p11-kit-develhuawei-euleros-2_0_sp5-upgrade-p11-kit-trust | Mar 24, 2021 | Dec 16, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-p11-kithuawei-euleros-2_0_sp8-upgrade-p11-kit-develhuawei-euleros-2_0_sp8-upgrade-p11-kit-serverhuawei-euleros-2_0_sp8-upgrade-p11-kit-trust | Feb 2, 2021 | Dec 16, 2020 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-p11-kithuawei-euleros-2_0_sp9-upgrade-p11-kit-trust | Jan 5, 2021 | Dec 16, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-desktop-p11-kit-0-23-22-11-4-36-0-1-101-0 | Aug 27, 2021 | Dec 16, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-p11-kitoracle-linux-upgrade-p11-kit-develoracle-linux-upgrade-p11-kit-serveroracle-linux-upgrade-p11-kit-trust | May 26, 2021 | Dec 12, 2020 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-p11-kitredhat-upgrade-p11-kit-debuginforedhat-upgrade-p11-kit-debugsourceredhat-upgrade-p11-kit-develredhat-upgrade-p11-kit-serverredhat-upgrade-p11-kit-server-debuginforedhat-upgrade-p11-kit-trustredhat-upgrade-p11-kit-trust-debuginfo | May 21, 2021 | Dec 16, 2020 | |
| Rocky_linux | rocky-upgrade-p11-kitrocky-upgrade-p11-kit-debuginforocky-upgrade-p11-kit-debugsourcerocky-upgrade-p11-kit-develrocky-upgrade-p11-kit-serverrocky-upgrade-p11-kit-server-debuginforocky-upgrade-p11-kit-trustrocky-upgrade-p11-kit-trust-debuginfo | Mar 12, 2024 | Dec 16, 2020 | |
| Suse | — | suse-upgrade-apache2-mod_apparmorsuse-upgrade-apparmor-docssuse-upgrade-apparmor-parsersuse-upgrade-apparmor-profilessuse-upgrade-apparmor-utilssuse-upgrade-ca-certificatessuse-upgrade-ctdbsuse-upgrade-libapparmor-develsuse-upgrade-libapparmor1suse-upgrade-libapparmor1-32bitsuse-upgrade-libgnutls30suse-upgrade-libgnutls30-32bitsuse-upgrade-libhogweed4suse-upgrade-libhogweed4-32bitsuse-upgrade-libipa_hbac-develsuse-upgrade-libipa_hbac0suse-upgrade-libnettle6suse-upgrade-libnettle6-32bitsuse-upgrade-libp11-kit0suse-upgrade-libp11-kit0-32bitsuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy-python3-develsuse-upgrade-libsamba-policy0-python3suse-upgrade-libsamba-policy0-python3-32bitsuse-upgrade-libsss_certmap0suse-upgrade-libsss_idmap-develsuse-upgrade-libsss_idmap0suse-upgrade-libsss_nss_idmap-develsuse-upgrade-libsss_nss_idmap0suse-upgrade-libsss_simpleifp0suse-upgrade-p11-kitsuse-upgrade-p11-kit-32bitsuse-upgrade-p11-kit-develsuse-upgrade-p11-kit-nss-trustsuse-upgrade-p11-kit-nss-trust-32bitsuse-upgrade-p11-kit-toolssuse-upgrade-pam_apparmorsuse-upgrade-pam_apparmor-32bitsuse-upgrade-perl-apparmorsuse-upgrade-python-sssd-configsuse-upgrade-sambasuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-client-libssuse-upgrade-samba-client-libs-32bitsuse-upgrade-samba-develsuse-upgrade-samba-devel-32bitsuse-upgrade-samba-docsuse-upgrade-samba-ldb-ldapsuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-python3suse-upgrade-samba-toolsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-libssuse-upgrade-samba-winbind-libs-32bitsuse-upgrade-sssdsuse-upgrade-sssd-adsuse-upgrade-sssd-commonsuse-upgrade-sssd-dbussuse-upgrade-sssd-ipasuse-upgrade-sssd-krb5suse-upgrade-sssd-krb5-commonsuse-upgrade-sssd-ldapsuse-upgrade-sssd-proxysuse-upgrade-sssd-toolssuse-upgrade-yast2-samba-client | Dec 23, 2021 | Dec 12, 2020 |
| Ubuntu | ubuntu-pro-upgrade-libp11-kit0ubuntu-pro-upgrade-p11-kitubuntu-pro-upgrade-p11-kit-modulesubuntu-upgrade-libp11-kit0ubuntu-upgrade-p11-kitubuntu-upgrade-p11-kit-modules | Jan 6, 2021 | Dec 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub