PT-2020-5853 · P11 Kit+7 · P11-Kit+7

Published 2020-11-27 · Updated 2023-01-04 · CVE-2020-29363

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: p11-kit versions 0.23.6 through 0.23.21

Description: A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CK ATTRIBUTE, the receiving entity may not allocate sufficient length for the buffer to store the deserialized value. This issue is related to the p11 rpc buffer get byte array value function and can lead to a denial of service.

Recommendations: For p11-kit versions 0.23.6 through 0.23.21, consider updating to a version that contains a fix for this issue. As a temporary workaround, restrict access to the vulnerable p11 rpc buffer get byte array value function until a patch is available. Avoid using the CK ATTRIBUTE with serialized byte arrays in the affected RPC protocol until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2021:1609

ALT-PU-2022-1076

ALT-PU-2022-2435

ALT-PU-2023-1006

BDU:2021-01897

CESA-2021_1609

CVE-2020-29363

DSA-4822-1

GHSA-5J67-FW89-FP6X

MGASA-2021-0041

OESA-2021-1024

RHSA-2021:1609

RHSA-2021_1609

RLSA-2021:1609

USN-4677-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Rocky Linux

Ubuntu

P11-Kit

References · 52

• https://nvd.nist.gov/vuln/detail/CVE-2020-29361 · Security Note
• https://errata.rockylinux.org/RLSA-2021:1609 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4677-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-29363 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1024 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-29363 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-29363 · Security Note
• https://ubuntu.com/security/CVE-2020-29361 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-1609.html · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2020-29363 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29363 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/4D5CLBYQ6GQU5KRRIBTSC4AOKNPX2JPE · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-29363 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2021:1609 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01897 · Security Note