https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:39:11 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-18938 <p>A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.</p> <p>A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-18938 https://vulnerability.circl.lu/vuln/ghsa-6x8p-h5fj-5ppr <p>A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.</p> <p>A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.</p> https://vulnerability.circl.lu/vuln/ghsa-6x8p-h5fj-5ppr https://vulnerability.circl.lu/vuln/oesa-2026-3503 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: p11-kit, openEuler:24.03-LTS-SP4: p11-kit, openEuler:20.03-LTS-SP4: p11-kit, openEuler:22.03-LTS-SP4: p11-kit, openEuler:24.03-LTS-SP1: p11-kit</p> <p>Provides a way to load and enumerate PKCS#11 modules. Provides a standard configuration setup for installing PKCS#11 modules in such a way that they&amp;amp;apos;re discoverable. Also solves problems with coordinating the use of PKCS#11 by different components or libraries living in the same process. Security Fix(es):</p> <p>A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.(CVE-2026-18938)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: p11-kit, openEuler:24.03-LTS-SP4: p11-kit, openEuler:20.03-LTS-SP4: p11-kit, openEuler:22.03-LTS-SP4: p11-kit, openEuler:24.03-LTS-SP1: p11-kit</p> <p>Provides a way to load and enumerate PKCS#11 modules. Provides a standard configuration setup for installing PKCS#11 modules in such a way that they&amp;amp;apos;re discoverable. Also solves problems with coordinating the use of PKCS#11 by different components or libraries living in the same process. Security Fix(es):</p> <p>A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.(CVE-2026-18938)</p> https://vulnerability.circl.lu/vuln/oesa-2026-3503 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11862-1 <p>libp11-kit0-0.26.5-1.1 on GA media</p> <p>libp11-kit0-0.26.5-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11862-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-18938 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: p11-kit, Ubuntu:Pro:20.04:LTS: p11-kit, Ubuntu:22.04:LTS: p11-kit, Ubuntu:24.04:LTS: p11-kit, Ubuntu:26.04:LTS: p11-kit</p> <p>A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: p11-kit, Ubuntu:Pro:20.04:LTS: p11-kit, Ubuntu:22.04:LTS: p11-kit, Ubuntu:24.04:LTS: p11-kit, Ubuntu:26.04:LTS: p11-kit</p> <p>A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-18938