Поиск уязвимостей
Количество 15
Количество 15
CVE-2026-13757
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.
CVE-2026-13757
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.
CVE-2026-13757
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.
CVE-2026-13757
P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
CVE-2026-13757
A flaw was found in p11-kit. The RPC message attribute parsing functio ...
ROS-20261001-80-0056
Уязвимость p11-kit
ROS-20261001-73-0029
Уязвимость p11-kit
RLSA-2026:49668
Moderate: p11-kit security update
RLSA-2026:49667
Moderate: p11-kit security update
GHSA-p2wm-69qx-x25w
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.
ELSA-2026-49668
ELSA-2026-49668: p11-kit security update (MODERATE)
ELSA-2026-49667
ELSA-2026-49667: p11-kit security update (MODERATE)
ALT-PU-2026-10648
ALT-PU-2026-10648: package `p11-kit` update to version 0.26.2-alt3.g0eedd4d
openSUSE-SU-2026:22105-1
Security update for p11-kit
ALT-PU-2026-14498
ALT-PU-2026-14498: package `p11-kit` update to version 0.26.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-13757 A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services. | CVSS3: 6.2 | 0% Низкий | 4 месяца назад |
 | CVE-2026-13757 A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services. | CVSS3: 6.2 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-13757 A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services. | CVSS3: 6.2 | 0% Низкий | 4 месяца назад |
 | CVE-2026-13757 P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing | CVSS3: 6.2 | 0% Низкий | 4 месяца назад |
| CVE-2026-13757 A flaw was found in p11-kit. The RPC message attribute parsing functio ... | CVSS3: 6.2 | 0% Низкий | 4 месяца назад |
 | ROS-20261001-80-0056 Уязвимость p11-kit | CVSS3: 6.2 | 0% Низкий | около 1 месяца назад |
| ROS-20261001-73-0029 Уязвимость p11-kit | CVSS3: 6.2 | 0% Низкий | около 1 месяца назад |
 | RLSA-2026:49668 Moderate: p11-kit security update | 0% Низкий | 3 месяца назад | |
| RLSA-2026:49667 Moderate: p11-kit security update | 0% Низкий | 3 месяца назад | |
| GHSA-p2wm-69qx-x25w A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services. | CVSS3: 6.2 | 0% Низкий | 4 месяца назад |
| ELSA-2026-49668 ELSA-2026-49668: p11-kit security update (MODERATE) | 0% Низкий | 3 месяца назад | |
| ELSA-2026-49667 ELSA-2026-49667: p11-kit security update (MODERATE) | 0% Низкий | 3 месяца назад | |
| ALT-PU-2026-10648 ALT-PU-2026-10648: package `p11-kit` update to version 0.26.2-alt3.g0eedd4d | CVSS3: 6.2 | 0% Низкий | 4 месяца назад |
 | openSUSE-SU-2026:22105-1 Security update for p11-kit | 25 дней назад | ||
| ALT-PU-2026-14498 ALT-PU-2026-14498: package `p11-kit` update to version 0.26.5-alt1 | CVSS3: 7.5 | около 2 месяцев назад |
Уязвимостей на страницу