İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Orta CVSS 6.2

CVE-2026-13757: Hardened Images: güvenlik açığı

Yayın: · Güncelleme:

Açıklama (NVD)

A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.

Özet bilgiler

Ürün
Redhat Hardened Images
CVSS v3.1
6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
%0,15 (yüzdelik 5)
CWE
CWE-674
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
redhat-hardened-images———
redhat-openshift-container-platform4.04.22.1—
redhat-enterprise-linux6.06.0—
redhat-enterprise-linux7.07.0—
redhat-enterprise-linux8.08.0—
redhat-enterprise-linux9.09.0—
redhat-enterprise-linux10.010.0—
p11-kit-project-p11-kit———

Kaynaklar

Uygulamada aç Tüm CVE kayıtları