Vulnerabilidades de p11-kit project (CVE)

Registros CVE publicados para p11-kit project, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

6.2Media

CVE-2026-13757 hace 4 meses

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9; Red Hat Cert Manager support for Red Hat OpenShift release 1.17; Red Hat Cert Manager support for Red Hat OpenShift release 1.18

A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLAT…

5.3Media

CVE-2026-2100 hace 7 meses

P11-kit: null dereference via c_derivekey with specific null parameters

p11-glue p11-kit; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9; Red Hat Cert Manager support for Red Hat OpenShift release 1.17

A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to r…

1.3%EPSS