CVE-2020-29361

Katalog CVE

CVSS 7.5 · High EPSS 3,4%

Kerentanan Integer Overflow or Wraparound pada p11-kit project p11-kit, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.

Rincian

Terbit di NVD

16 Desember 2020

Terakhir diubah

14 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

3,4% peluang dieksploitasi; lebih tinggi dari 88,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/p11-glue/p11-kit/releases release notes · advisory pihak ketiga
• https://github.com/p11-glue/p11-kit/security/advisories/GHSA-q4r3-hm6m-mvc2 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/01/msg00002.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4822 advisory pihak ketiga
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.boo...
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.boo...
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html