PT-2022-37416 · Pkcs11 · Pkcs11

Published 2022-07-22 · Updated 2022-07-22

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions pkcs11 (affected versions not specified)

Description The pkcs11 interface has several safety issues, primarily related to the handling of raw pointers. These issues can lead to segmentation faults and undefined behavior when pointers are dereferenced. Problems identified by the community include use-after-free and unsound uses of transmute copy. Users must be extremely careful when making calls to avoid these issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

RUSTSEC-2022-0034

Affected Products

Pkcs11

References · 4

• https://osv.dev/vulnerability/RUSTSEC-2022-0034 · Vendor Advisory
• https://github.com/mheese/rust-pkcs11/issues/57 · Note
• https://rustsec.org/advisories/RUSTSEC-2022-0034.html · Note
• https://crates.io/crates/pkcs11 · Note