An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS#11 function call, the receiving entity may allow the reading of up to 4 bytes of memory past the heap allocation.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-p11-kitalma-upgrade-p11-kit-develalma-upgrade-p11-kit-serveralma-upgrade-p11-kit-trust | May 4, 2022 | Dec 16, 2020 | |
| Alpine Linux | alpine-linux-upgrade-p11-kit | Mar 26, 2024 | Dec 16, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-p11-kitamazon-linux-ami-2-upgrade-p11-kit-debuginfoamazon-linux-ami-2-upgrade-p11-kit-develamazon-linux-ami-2-upgrade-p11-kit-serveramazon-linux-ami-2-upgrade-p11-kit-trust | Feb 22, 2021 | Dec 16, 2020 | |
| Centos_linux | — | centos-upgrade-p11-kitcentos-upgrade-p11-kit-debuginfocentos-upgrade-p11-kit-debugsourcecentos-upgrade-p11-kit-develcentos-upgrade-p11-kit-servercentos-upgrade-p11-kit-server-debuginfocentos-upgrade-p11-kit-trustcentos-upgrade-p11-kit-trust-debuginfo | Jun 1, 2021 | Dec 16, 2020 |
| Debian | debian-upgrade-p11-kit | Jan 4, 2021 | Dec 16, 2020 | |
| Freebsd | freebsd-upgrade-package-p11-kit | Dec 13, 2020 | Dec 12, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-p11-kithuawei-euleros-2_0_sp8-upgrade-p11-kit-develhuawei-euleros-2_0_sp8-upgrade-p11-kit-serverhuawei-euleros-2_0_sp8-upgrade-p11-kit-trust | Feb 2, 2021 | Dec 16, 2020 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-p11-kithuawei-euleros-2_0_sp9-upgrade-p11-kit-trust | Jan 5, 2021 | Dec 16, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-desktop-p11-kit-0-23-22-11-4-36-0-1-101-0 | Aug 27, 2021 | Dec 16, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-p11-kitoracle-linux-upgrade-p11-kit-develoracle-linux-upgrade-p11-kit-serveroracle-linux-upgrade-p11-kit-trust | May 26, 2021 | Dec 12, 2020 |
| Redhat_linux | redhat-upgrade-p11-kitredhat-upgrade-p11-kit-debuginforedhat-upgrade-p11-kit-debugsourceredhat-upgrade-p11-kit-develredhat-upgrade-p11-kit-serverredhat-upgrade-p11-kit-server-debuginforedhat-upgrade-p11-kit-trustredhat-upgrade-p11-kit-trust-debuginfo | May 21, 2021 | Dec 16, 2020 | |
| Rocky_linux | rocky-upgrade-p11-kitrocky-upgrade-p11-kit-debuginforocky-upgrade-p11-kit-debugsourcerocky-upgrade-p11-kit-develrocky-upgrade-p11-kit-serverrocky-upgrade-p11-kit-server-debuginforocky-upgrade-p11-kit-trustrocky-upgrade-p11-kit-trust-debuginfo | Mar 12, 2024 | Dec 16, 2020 | |
| Suse | — | suse-upgrade-libp11-kit0suse-upgrade-libp11-kit0-32bitsuse-upgrade-p11-kitsuse-upgrade-p11-kit-32bitsuse-upgrade-p11-kit-develsuse-upgrade-p11-kit-nss-trustsuse-upgrade-p11-kit-nss-trust-32bitsuse-upgrade-p11-kit-serversuse-upgrade-p11-kit-tools | Aug 9, 2024 | Dec 16, 2020 |
| Ubuntu | ubuntu-upgrade-libp11-kit0ubuntu-upgrade-p11-kitubuntu-upgrade-p11-kit-modules | Jan 6, 2021 | Dec 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub