CVE-2020-29361
An issue was discovered in p11-kit 0.21.1 through 0.23.21.
Published Dec 16, 2020 · updated Oct 14, 2026 · p11-kit project p11-kit
An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Dec 16, 2020 · NIST NVD
Detected
An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.
Oct 14, 2026 · NIST NVD
Updated
An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.
Affected
- cpe debian/debian linux10.0
- cpe debian/debian linux9.0
- cpe p11-kit project/p11-kitversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2020-29361
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2020-29361
30-day exploitation probability 3.5%
first.org - NIST NVDVulnerability recordCVE-2020-29361
An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.
nvd.nist.gov