deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-2082
Published: 2020-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none
CVE: CVE-2020-2083
Published: 2020-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none
CVE: CVE-2020-2084
Published: 2020-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none
CVE: CVE-2020-2085
Published: 2020-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none
CVE: CVE-2020-2086
Published: 2020-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none
CVE: CVE-2020-2087
Published: 2020-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none
CVE: CVE-2020-2088
Published: 2020-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none
CVE: CVE-2020-2089
Published: 2020-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none
CVE: CVE-2020-10770
Published: 2020-12-15
Description: A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: http://packetstormsecurity.com/files/164499/Keycloak-12.0.1-Server-Side-Request-Forgery.html; https://bugzilla.redhat.com/show_bug.cgi?id=1846270; http://packetstormsecurity.com/files/164499/Keycloak-12.0.1-Server-Side-Request-Forgery.html
CVE: CVE-2020-14302
Published: 2020-12-15
Description: A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same "state" parameter. This flaw allows a malicious user to perform replay attacks.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-294, CWE-294
References: https://bugzilla.redhat.com/show_bug.cgi?id=1849584; https://bugzilla.redhat.com/show_bug.cgi?id=1849584
CVE: CVE-2020-25195
Published: 2020-12-15
Description: The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when receiving input from the configuration web server, which may allow an attacker to bypass the check and send input to crash the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-345-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-345-02
CVE: CVE-2020-25757
Published: 2020-12-15
Description: A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges. This affects DSR-150, DSR-250, DSR-500, and DSR-1000AC with firmware 3.14 and 3.17.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-78
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10195; https://www.digitaldefense.com/news/zero-day-vuln-d-link-vpn-routers/; https://www.dlink.com/en/security-bulletin
CVE: CVE-2020-25758
Published: 2020-12-15
Description: An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-354
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10195; https://www.digitaldefense.com/news/zero-day-vuln-d-link-vpn-routers/; https://www.dlink.com/en/security-bulletin
CVE: CVE-2020-25759
Published: 2020-12-15
Description: An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-78
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10195; https://www.digitaldefense.com/news/zero-day-vuln-d-link-vpn-routers/; https://www.dlink.com/en/security-bulletin
CVE: CVE-2020-23957
Published: 2020-12-15
Description: Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jayaramyalla.medium.com/cross-site-scripting-in-pega-cve-2020-23957-16d1c417da5f; https://jayaramyalla.medium.com/cross-site-scripting-in-pega-cve-2020-23957-16d1c417da5f
CVE: CVE-2020-28072
Published: 2020-12-15
Description: A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/160508/Alumni-Management-System-1.0-Shell-Upload.html; http://packetstormsecurity.com/files/160508/Alumni-Management-System-1.0-Shell-Upload.html
CVE: CVE-2020-29606
Published: 2020-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-35380
Published: 2020-12-15
Description: GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.
CVSS Score: 7.5 (HIGH)
References: https://github.com/tidwall/gjson/issues/192; https://github.com/tidwall/gjson/issues/192
CVE: CVE-2020-35381
Published: 2020-12-15
Description: jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.
CVSS Score: 7.5 (HIGH)
References: https://github.com/buger/jsonparser/issues/219; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27EA7OGCELV7QFAGVIHODHWKMKGFVIUZ/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LJO5N7YTDEUSTKYTNA372CE6VHCZJWUG/
CVE: CVE-2020-35416
Published: 2020-12-15
Description: Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage (with different request parameters), allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/160502/PHPJabbers-Appointment-Scheduler-2.3-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/160600/PHPJabbers-Appointment-Scheduler-2.3-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/49281
CVE: CVE-2018-16243
Published: 2020-12-15
Description: SolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen, userAdministration.iwc, database.iwc, alertManagement.iwc, eventAnnotations.iwc, and central.cen.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/james-otten/d3ee2f0fccc3b87aafe1616a6c2c2d4e; https://gist.github.com/james-otten/d3ee2f0fccc3b87aafe1616a6c2c2d4e
CVE: CVE-2020-29663
Published: 2020-12-15
Description: Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. This issue is fixed in Icinga 2 v2.11.8 and v2.12.3.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295
References: https://github.com/Icinga/icinga2/compare/v2.12.1...v2.12.2; https://github.com/Icinga/icinga2/security/advisories/GHSA-pcmr-2p2f-r7j6; https://github.com/Icinga/icinga2/compare/v2.12.1...v2.12.2
CVE: CVE-2020-35121
Published: 2020-12-15
Description: An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could insert arbitrary JavaScript into saved macro parameters that would execute when a user viewed a page with that instance of the macro.
CVSS Score: 8.8 (HIGH)
References: https://bitbucket.org/keysight/keysight-plugins-for-atlassian-products/wiki/Confluence%20Plugins/Database%20Plugin; https://bitbucket.org/keysight/keysight-plugins-for-atlassian-products/wiki/Confluence%20Plugins/Database%20Plugin
CVE: CVE-2020-35122
Published: 2020-12-15
Description: An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://bitbucket.org/keysight/keysight-plugins-for-atlassian-products/wiki/Confluence%20Plugins/Database%20Plugin; https://bitbucket.org/keysight/keysight-plugins-for-atlassian-products/wiki/Confluence%20Plugins/Database%20Plugin
CVE: CVE-2020-35462
Published: 2020-12-15
Description: Version 3.16.0 of the CoScale agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the CoScale agent container may allow a remote attacker to achieve root access with a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35462; https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35462
CVE: CVE-2020-35463
Published: 2020-12-15
Description: Version 1.0.0 of the Instana Dynamic APM Docker image contains a blank password for the root user. Systems deployed using affected versions of the Instana Dynamic APM container may allow a remote attacker to achieve root access with a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35463; https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35463
CVE: CVE-2020-35464
Published: 2020-12-15
Description: Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Agent container may allow a remote attacker to achieve root access with a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35464; https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35464
CVE: CVE-2020-35465
Published: 2020-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2020-35466
Published: 2020-12-15
Description: The Blackfire Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Blackfire container may allow a remote attacker to achieve root access with a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35466; https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35466
CVE: CVE-2020-35467
Published: 2020-12-15
Description: The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Docker Docs container may allow a remote attacker to achieve root access with a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35467; https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35467
CVE: CVE-2020-35193
Published: 2020-12-16
Description: The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System using the sonarqube docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/koharin/koharin2/blob/main/CVE-2020-35193; https://github.com/koharin/koharin2/blob/main/CVE-2020-35193
CVE: CVE-2020-35468
Published: 2020-12-16
Description: The Appbase streams Docker image 2.1.2 contains a blank password for the root user. Systems deployed using affected versions of the streams container may allow a remote attacker to achieve root access with a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35468; https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35468
CVE: CVE-2020-35469
Published: 2020-12-16
Description: The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user. Systems deployed using affected versions of the Terracotta Server OSS container may allow a remote attacker to achieve root access with a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35469; https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35469
CVE: CVE-2020-26258
Published: 2020-12-16
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can be activated when unmarshalling. The vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.15. The reported vulnerability does not exist if running Java 15 or higher. No user is affected who followed the recommendation to setup XStream's Security Framework with a whitelist! Anyone relying on XStream's default blacklist can immediately switch to a whilelist for the allowed types to avoid the vulnerability. Users of XStream 1.4.14 or below who still want to use XStream default blacklist can use a workaround described in more detailed in the referenced advisories.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://github.com/x-stream/xstream/security/advisories/GHSA-4cch-wxpw-8p28; https://lists.apache.org/thread.html/r97993e3d78e1f5389b7b172ba9f308440830ce5f051ee62714a0aa34@%3Ccommits.struts.apache.org%3E; https://lists.debian.org/debian-lts-announce/2020/12/msg00042.html
CVE: CVE-2020-26259
Published: 2020-12-16
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling. The vulnerability may allow a remote attacker to delete arbitrary know files on the host as log as the executing process has sufficient rights only by manipulating the processed input stream. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.15. The reported vulnerability does not exist running Java 15 or higher. No user is affected, who followed the recommendation to setup XStream's Security Framework with a whitelist! Anyone relying on XStream's default blacklist can immediately switch to a whilelist for the allowed types to avoid the vulnerability. Users of XStream 1.4.14 or below who still want to use XStream default blacklist can use a workaround described in more detailed in the referenced advisories.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://github.com/x-stream/xstream/security/advisories/GHSA-jfvx-7wrx-43fh; https://lists.apache.org/thread.html/r97993e3d78e1f5389b7b172ba9f308440830ce5f051ee62714a0aa34%40%3Ccommits.struts.apache.org%3E; https://lists.debian.org/debian-lts-announce/2020/12/msg00042.html
CVE: CVE-2020-26273
Published: 2020-12-16
Description: osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery before version 4.6.0, by using sqlite's ATTACH verb, someone with administrative access to osquery can cause reads and writes to arbitrary sqlite databases on disk. This _does_ allow arbitrary files to be created, but they will be sqlite databases. It does not appear to allow existing non-sqlite files to be overwritten. This has been patched in osquery 4.6.0. There are several mitigating factors and possible workarounds. In some deployments, the people with access to these interfaces may be considered administrators. In some deployments, configuration is managed by a central tool. This tool can filter for the `ATTACH` keyword. osquery can be run as non-root user. Because this also limits the desired access levels, this requires deployment specific testing and configuration.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://github.com/osquery/osquery/commit/c3f9a3dae22d43ed3b4f6a403cbf89da4cba7c3c; https://github.com/osquery/osquery/releases/tag/4.6.0; https://github.com/osquery/osquery/security/advisories/GHSA-4g56-2482-x7q8
CVE: CVE-2020-35476
Published: 2020-12-16
Description: A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. (tsd/GraphHandler.java attempted to prevent command injections by blocking backticks but this is insufficient.)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/170331/OpenTSDB-2.4.0-Command-Injection.html; https://github.com/OpenTSDB/opentsdb/issues/2051; http://packetstormsecurity.com/files/170331/OpenTSDB-2.4.0-Command-Injection.html
CVE: CVE-2020-5682
Published: 2020-12-16
Description: Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier allows remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-400
References: https://github.com/weseek/growi; https://hub.docker.com/r/weseek/growi/; https://jvn.jp/en/jp/JVN94169589/index.html
CVE: CVE-2020-5683
Published: 2020-12-16
Description: Directory traversal vulnerability in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier allows remote attackers to alter the data by uploading a specially crafted file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/weseek/growi; https://hub.docker.com/r/weseek/growi/; https://jvn.jp/en/jp/JVN94169589/index.html
CVE: CVE-2020-28458
Published: 2020-12-16
Description: All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://github.com/DataTables/DataTablesSrc/commit/a51cbe99fd3d02aa5582f97d4af1615d11a1ea03; https://github.com/DataTables/Dist-DataTables/blob/master/js/jquery.dataTables.js%23L2766; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-25617
Published: 2020-12-16
Description: An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), leading to execution of OS commands as root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://ernw.de/en/publications.html; https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/; https://support.solarwinds.com/SuccessCenter/s/
CVE: CVE-2020-25618
Published: 2020-12-16
Description: An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as root (i.e., the use of root privileges is not limited to specific programs listed in the sudoers file).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://ernw.de/en/publications.html; https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/; https://support.solarwinds.com/SuccessCenter/s/
CVE: CVE-2020-25619
Published: 2020-12-16
Description: An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An attacker can leverage an SSH feature (port forwarding with a temporary key pair) to access network services on the 127.0.0.1 interface, even though this feature was only intended for user-to-agent communication.
CVSS Score: 4.4 (MEDIUM)
References: https://ernw.de/en/publications.html; https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/; https://support.solarwinds.com/SuccessCenter/s/
CVE: CVE-2020-29361
Published: 2020-12-16
Description: An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/p11-glue/p11-kit/releases; https://github.com/p11-glue/p11-kit/security/advisories/GHSA-q4r3-hm6m-mvc2; https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE: CVE-2020-29362
Published: 2020-12-16
Description: An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS#11 function call, the receiving entity may allow the reading of up to 4 bytes of memory past the heap allocation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://github.com/p11-glue/p11-kit/releases; https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5wpq-43j2-6qwc; https://lists.debian.org/debian-lts-announce/2021/01/msg00002.html
CVE: CVE-2020-29363
Published: 2020-12-16
Description: An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CK_ATTRIBUTE, the receiving entity may not allocate sufficient length for the buffer to store the deserialized value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/p11-glue/p11-kit/releases; https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5j67-fw89-fp6x; https://www.debian.org/security/2021/dsa-4822