p11-kit project Schwachstellen (CVE)

Für p11-kit project veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

6.2Mittel

CVE-2026-13757 vor 4 Monaten

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9; Red Hat Cert Manager support for Red Hat OpenShift release 1.17; Red Hat Cert Manager support for Red Hat OpenShift release 1.18

A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLAT…

5.3Mittel

CVE-2026-2100 vor 7 Monaten

P11-kit: null dereference via c_derivekey with specific null parameters

p11-glue p11-kit; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9; Red Hat Cert Manager support for Red Hat OpenShift release 1.17

A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to r…

1.3%EPSS