p11-kit

Link	package \| bugs open \| bugs closed \| Wiki \| GitHub \| web search
Description	Loads and enumerates PKCS#11 modules
Version	0.25.5-1 [core]

Resolved

Group	Affected	Fixed	Severity	Status	Ticket
AVG-1355	0.23.21-1	0.23.22-1	Medium	Fixed

Issue	Group	Severity	Remote	Type	Description
CVE-2020-29363	AVG-1355	Medium	Yes	Arbitrary code execution	A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library in versions 0.23.6 up to...
CVE-2020-29362	AVG-1355	Medium	Yes	Information disclosure	A heap-based buffer over-read has been discovered in the RPC protocol used by the p11-kit server/remote commands and the client library in versions 0.21.1...
CVE-2020-29361	AVG-1355	Medium	No	Arbitrary code execution	Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command in versions 0.21.1 up to...

Issue

Group

Severity

Remote

Type

Description

CVE-2020-29363

AVG-1355

Medium

Yes

Arbitrary code execution

A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library in versions 0.23.6 up to...

CVE-2020-29362

AVG-1355

Medium

Yes

Information disclosure

A heap-based buffer over-read has been discovered in the RPC protocol used by the p11-kit server/remote commands and the client library in versions 0.21.1...

CVE-2020-29361

AVG-1355

Medium

Arbitrary code execution

Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command in versions 0.21.1 up to...