PT-2021-1396 · Ibm · Opencryptoki

Published

2021-12-21

·

Updated

2021-12-21

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions: opencryptoki versions 2.11
Description: The opencryptoki packages contain a version of the PKCS#11 API implemented for IBM Cryptocards. These packages include support for various IBM cryptographic hardware and a software token implementation. A bug was found in the apiutil.c file, where it could not open /run/lock/opencryptoki/LCK..APIlock.
Recommendations: For opencryptoki version 2.11, consider applying the bug fix to resolve the issue with apiutil.c not being able to open /run/lock/opencryptoki/LCK..APIlock. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

ALBA-2021:5224

Affected Products

Opencryptoki