Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2020-29363 PUBLISHED CVSS 7.5 HIGH

An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CK_ATTRIBUTE, the receiving entity may not allocate sufficient length for the buffer to store the deserialized value.

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.17p11-kit0.9-r0, 0.23.21-r0, 0.23.20-r5
Alpine:v3.22p11-kit0, 0.9-r0, 0.23.21-r0
Alpine:v3.10p11-kit0.23.1-r0, 0.23.1-r1, 0.23.14-r0
Alpine:v3.23p11-kit0.9-r0, 0.23.21-r0, 0.23.20-r5
Alpine:v3.19p11-kit0, 0.12-r0, 0.13-r0
Alpine:v3.13p11-kit0.12-r0, 0.22.1-r0, 0.23.1-r1
Alpine:v3.14p11-kit0.13-r0, 0.23.21-r0, 0.23.20-r2
Alpine:v3.20p11-kit0.12-r0, 0.23.21-r0, 0.23.20-r5
Alpine:v3.18p11-kit0.23.10-r0, 0.13-r0, 0.9-r0
Alpine:v3.16p11-kit0.23.20-r5, 0.18.0-r0, 0.18.1-r0
Alpine:v3.12p11-kit0.18.1-r1, 0.18.1-r2, 0.18.4-r0
Alpine:v3.21p11-kit0.23.15-r0, 0.23.16.1-r0, 0.23.17-r0
Alpine:v3.11p11-kit0, 0.9-r0, 0.23.2-r2
Alpine:v3.15p11-kit0.23.18.1-r0, 0.23.2-r1, 0.23.2-r2

Timeline

References

Open in Interactive Console →