An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "p11-kit-dbgsym": "0.20.2-2ubuntu2+esm1", "p11-kit-modules-dbgsym": "0.20.2-2ubuntu2+esm1", "libp11-kit0": "0.20.2-2ubuntu2+esm1", "libp11-kit-dev": "0.20.2-2ubuntu2+esm1", "p11-kit": "0.20.2-2ubuntu2+esm1", "libp11-kit-dev-dbgsym": "0.20.2-2ubuntu2+esm1", "libp11-kit0-dbgsym": "0.20.2-2ubuntu2+esm1", "p11-kit-modules": "0.20.2-2ubuntu2+esm1", "libp11-kit0-dbg": "0.20.2-2ubuntu2+esm1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "p11-kit-dbgsym": "0.23.2-5~ubuntu16.04.2", "p11-kit-modules-dbgsym": "0.23.2-5~ubuntu16.04.2", "libp11-kit-dev": "0.23.2-5~ubuntu16.04.2", "p11-kit": "0.23.2-5~ubuntu16.04.2", "libp11-kit0-dbgsym": "0.23.2-5~ubuntu16.04.2", "p11-kit-modules": "0.23.2-5~ubuntu16.04.2", "libp11-kit0": "0.23.2-5~ubuntu16.04.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "p11-kit-dbgsym": "0.23.9-2ubuntu0.1", "p11-kit-modules-dbgsym": "0.23.9-2ubuntu0.1", "libp11-kit-dev": "0.23.9-2ubuntu0.1", "p11-kit": "0.23.9-2ubuntu0.1", "libp11-kit0-dbgsym": "0.23.9-2ubuntu0.1", "p11-kit-modules": "0.23.9-2ubuntu0.1", "libp11-kit0": "0.23.9-2ubuntu0.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "p11-kit-dbgsym": "0.23.20-1ubuntu0.1", "p11-kit-modules-dbgsym": "0.23.20-1ubuntu0.1", "libp11-kit-dev": "0.23.20-1ubuntu0.1", "p11-kit": "0.23.20-1ubuntu0.1", "libp11-kit0-dbgsym": "0.23.20-1ubuntu0.1", "p11-kit-modules": "0.23.20-1ubuntu0.1", "libp11-kit0": "0.23.20-1ubuntu0.1" } ] }