CVE-2020-29363

Katalog CVE

CVSS 7.5 · High EPSS 3,5%

Kerentanan Out-of-bounds Write pada p11-kit project p11-kit, debian linux +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CK_ATTRIBUTE, the receiving entity may not allocate sufficient length for the buffer to store the deserialized value.

Rincian

Terbit di NVD

16 Desember 2020

Terakhir diubah

14 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

3,5% peluang dieksploitasi; lebih tinggi dari 88,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
• https://github.com/p11-glue/p11-kit/releases release notes · advisory pihak ketiga
• https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5j67-fw89-fp6x advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4822 advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html