CVE-2020-29363

An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CKATTRIBUTE, the receiving entity may not...

[SECURITY] Fedora 33 Update: p11-kit-0.23.22-1.fc33

p11-kit provides a way to load and enumerate PKCS11 modules, as well as a standard configuration setup for installing PKCS11 modules in such a way that they're discoverable...

PT-2020-6233 · P11 Kit +8 · P11-Kit +8

Name of the Vulnerable Software and Affected Versions: p11-kit versions 0.21.1 through 0.23.21 Description: A heap-based buffer over-read has been discovered in the RPC protocol used by the p11-kit server/remote commands and the client library. When the remote entity supplies a byte array through...

PT-2020-6137 · P11 Kit +8 · P11-Kit +8

Name of the Vulnerable Software and Affected Versions: p11-kit versions 0.21.1 through 0.23.21 Description: An issue has been discovered in the p11-kit library and the p11-kit list command, where multiple integer overflows have been found in the array allocations. These overflows occur due to...

Fedora: Security Advisory for p11-kit (FEDORA-2020-b0b85758e9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 33 : p11-kit (2020-b0b85758e9)

This update fixes 3 security issues in the RPC protocol which p11-kit server/remote commands use : - https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5j67-fw89-fp6x - https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5wpq-43j2-6qwc -...

CVE-2020-29362

An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS11 function call, the receiving...

CVE-2020-29363

An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CKATTRIBUTE, the receiving entity may not...

CVE-2020-29361

An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc...

EulerOS 2.0 SP5 : pcp (EulerOS-SA-2020-2557)

According to the versions of the pcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE...

Virtuozzo 7 : java-1.7.0-openjdk / etc (VZLSA-2019-1839)

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

P11-glue P11-kit Buffer Error Vulnerability

P11-glue P11-kit is a utility software for loading and enumerating PKCS modules by the individual developer of P11-glue. A buffer error vulnerability exists in P11-glue P11-kit server/remote versions 0.23.6 through 0.23.21, which stems from a heap-based buffer overflow found in the RPC protocol,...

P11-glue P11-kit Buffer Error Vulnerability

P11-glue P11-kit is a utility software for loading and enumerating PKCS modules by the individual developer of P11-glue. A buffer error vulnerability exists in P11-glue P11-kit server/remote versions 0.23.6 through 0.23.21, which stems from a heap-based buffer over-read found in the RPC protocol...

Slackware 14.2 / current : p11-kit (SSA:2020-347-01)

New p11-kit packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-347-01. The text itself is copyright C Slackware Linux, Inc...

P11-glue P11-kit Input Validation Error Vulnerability

P11-glue P11-kit is a utility software for loading and enumerating PKCS modules by the individual developer of P11-glue. An input validation error vulnerability exists in P11-glue P11-kit versions 0.21.1 through 0.23.21. No information about this vulnerability is available at this time, so stay...

FreeBSD : p11-kit -- Multiple vulnerabilities (fdc49972-3ca7-11eb-929d-d4c9ef517024)

The p11-glue project reports : CVE-2020-29363: Out-of-bounds write in p11rpcbuffergetbytearrayvalue functionA heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array i...

Denial Of Service (DoS)

p11-kit is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer over-read has been discovered in the RPC protocol used by the p11-kit server/remote commands and the client library in versions 0.21.1 up to 0.23.21. When the remote entity supplies a byte array...

Arbitrary Code Execution

DEBIAN is vulnerable to arbitrary code execution. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library when the remote entity supplies a serialized byte array in a CKATTRIBUTE, the receiving entity may not allocate...

Denial Of Service (DoS)

p11-kit is vulnerable to denial of service DoS. The vulnerability exists through multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc...

[slackware-security] p11-kit

New p11-kit packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/p11-kit-0.23.22-i586-1slack14.2.txz: Upgraded. Fix memory-safety issues that affect the RPC protocol. For more information, see:...