CVE-2020-29361 is a high-severity vulnerability affecting p11-kit versions 0.21.1 through 0.23.21, specifically impacting Debian Linux distributions. The vulnerability stems from multiple integer overflows in array allocations within the p11-kit library and the p11-kit list command, due to missing overflow checks before memory reallocation. This could lead to a denial-of-service condition, as indicated by its CVSS score of 7.5. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 0.21.1, <= 0.23.21CPE matchmatch criteria | cpe:2.3:a:p11-kit_project:p11-kit:*:*:*:*:*:*:*:* | ||
9.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | ||
10.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers
Dec 12, 2020An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command where overflow checks are missing before calling realloc or calloc.
Dec 8, 2020