{"id":"CVE-2020-29362","title":"An issue was discovered in p11-kit 0.21.1 through 0.23.21","summary":"An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte arr…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-125"],"vendor":"p11-kit_project","product":"p11-kit","affected":["p11-kit >= 0.23.6, < 0.23.22"],"patched":["p11-kit 0.23.22"],"published":"2020-12-16","updated":"2026-10-14","sourceUpdated":"2026-10-14T10:17:34.647","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-29362","references":[{"url":"https://github.com/p11-glue/p11-kit/releases","label":"cve@mitre.org"},{"url":"https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5wpq-43j2-6qwc","label":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00002.html","label":"cve@mitre.org"},{"url":"https://www.debian.org/security/2021/dsa-4822","label":"cve@mitre.org"},{"url":"https://github.com/p11-glue/p11-kit/releases","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5wpq-43j2-6qwc","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00002.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2021/dsa-4822","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.0227,"epssPercentile":0.82964,"ingestedAt":"2026-10-14T10:25:41.183Z","slug":"CVE-2020-29362","body":"## Overview\n\nAn issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS#11 function call, the receiving entity may allow the reading of up to 4 bytes of memory past the heap allocation.\n\n## Affected\n\n- `p11-kit >= 0.23.6, < 0.23.22`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `p11-kit 0.23.22`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.2,"likelihood":0.5,"exploitation":0,"ransomware":0},"changes":[]}