vulnerability

Red Hat: CVE-2020-29361: integer overflow when allocating memory for arrays or attributes and object identifiers (Multiple Advisories)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
2020-12-16
Added
2021-05-21
Modified
2024-11-26

Description

An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.

Solution(s)

redhat-upgrade-p11-kitredhat-upgrade-p11-kit-debuginforedhat-upgrade-p11-kit-debugsourceredhat-upgrade-p11-kit-develredhat-upgrade-p11-kit-serverredhat-upgrade-p11-kit-server-debuginforedhat-upgrade-p11-kit-trustredhat-upgrade-p11-kit-trust-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.