High severity7.5NVD Advisory· Published Dec 16, 2020· Updated Jun 17, 2026
CVE-2020-29363
CVE-2020-29363
Description
An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CK_ATTRIBUTE, the receiving entity may not allocate sufficient length for the buffer to store the deserialized value.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
90.23.6 - 0.23.21+ 1 more
- (no CPE)range: 0.23.6 - 0.23.21
- cpe:2.3:a:p11-kit_project:p11-kit:*:*:*:*:*:*:*:*range: >=0.23.6,<0.23.22
- osv-coords4 versionspkg:rpm/almalinux/p11-kitpkg:rpm/almalinux/p11-kit-develpkg:rpm/almalinux/p11-kit-serverpkg:rpm/almalinux/p11-kit-trust
< 0.23.22-1.el8+ 3 more
- (no CPE)range: < 0.23.22-1.el8
- (no CPE)range: < 0.23.22-1.el8
- (no CPE)range: < 0.23.22-1.el8
- (no CPE)range: < 0.23.22-1.el8
- p11-kit/p11-kitdescription
- cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- www.oracle.com/security-alerts/cpuapr2022.htmlnvdPatchThird Party Advisory
- github.com/p11-glue/p11-kit/releasesnvdRelease NotesThird Party Advisory
- github.com/p11-glue/p11-kit/security/advisories/GHSA-5j67-fw89-fp6xnvdThird Party Advisory
- www.debian.org/security/2021/dsa-4822nvdThird Party Advisory
News mentions
0No linked articles in our index yet.