USN-4677-1 p11-kit vulnerabilities

David Cook discovered that p11-kit incorrectly handled certain memory operations. An attacker could use this issue to cause p11-kit to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-4677-1: p11-kit vulnerabilities

David Cook discovered that p11-kit incorrectly handled certain memory operations. An attacker could use this issue to cause p11-kit to crash, resulting in a denial of service, or possibly execute arbitrary code...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : p11-kit vulnerabilities (USN-4677-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4677-1 advisory. David Cook discovered that p11-kit incorrectly handled certain memory operations. An attacker could use this issue to cause p11-k...

Debian DLA-2513-1 : p11-kit security update

Several memory safety issues affecting the RPC protocol were fixed in p11-kit, a library providing a way to load and enumerate PKCS11 modules. CVE-2020-29361 Multiple integer overflows CVE-2020-29362 Heap-based buffer over-read For Debian 9 stretch, these problems have been fixed in version...

Debian: Security Advisory (DLA-2513-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2513-1] p11-kit security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2513-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 04, 2021 https://wiki.debian.org/LTS -...

EulerOS 2.0 SP9 : p11-kit (EulerOS-SA-2021-1034)

According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the...

Debian DSA-4822-1 : p11-kit - security update

David Cook reported several memory safety issues affecting the RPC protocol in p11-kit, a library providing a way to load and enumerate PKCS11 modules. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4822. Th...

EulerOS 2.0 SP9 : p11-kit (EulerOS-SA-2021-1015)

According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the...

DLA-2513-1 p11-kit - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4822-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4822-1] p11-kit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4822-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4822-1] p11-kit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4822-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 01, 2021 https://www.debian.org/security/faq -...

DSA-4822-1 p11-kit - security update

Bulletin has no description...

An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CK_ATTRIBUTE the receiving entity may not allocate sufficient length for the buffer to store the deserialized value.

...

[SECURITY] Fedora 32 Update: p11-kit-0.23.22-1.fc32

p11-kit provides a way to load and enumerate PKCS11 modules, as well as a standard configuration setup for installing PKCS11 modules in such a way that they're discoverable...

Fedora: Security Advisory for p11-kit (FEDORA-2020-edcc40be4b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 32 : p11-kit (2020-edcc40be4b)

This update fixes 3 security issues in the RPC protocol which p11-kit server/remote commands use : - https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5j67-fw89-fp6x - https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5wpq-43j2-6qwc -...

An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command where overflow checks are missing before calling realloc or calloc.

...

ALPINE-CVE-2020-29363

An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CKATTRIBUTE, the receiving entity may not...