CVE-2020-29361 @ mufasa

"CVE-2020-29361"
"p11-kit-0.23.5-3.el7"
"p11-kit-trust-0.23.5-3.el7"
"Am I vulnerable?"

Status

new

Priority

7.0

Match score

4.0

Risk

DoS Remote

CVSS

7.5 HIGH

Reason

cpe: p11-kit; pkgs: p11-kit, p11-kit-trust; version: in-range: p11-kit-0.23.5-3.el7, p11-kit-trust-0.23.5-3.el7; risk:dos

Created

2026-10-15T10:20:42Z

Updated

2026-10-20T10:18:50Z

Package interrogation (copy)

Run on the host — click to copy a command. RPM

Package	Commands
p11-kit-0.23.5-3.el7
p11-kit-trust-0.23.5-3.el7

Inventory lookup

Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.

Suggestions: p11-kit · p11-kit-trust

System	Matches	Ticket for CVE-2020-29361
morris	p11-kit-trust 0.23.5	new open
mufasa	p11-kit-trust 0.23.5	new open

Related CVE (same fix)

Point this ticket’s CVE at a higher-priority / same-fix primary so you only triage one.

Host OS / kernel

CloudLinux release 7.9 (Boris Yegorov) (7.9) · cloudlinux

Arch

x86_64

kernel_release

uname -r → 3.10.0-962.3.2.lve1.5.89.el7.x86_64

kernel_version

uname -v → #1 SMP Thu Jul 9 15:55:31 UTC 2026

For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.

Same CVE on other hosts

Open the ticket for this CVE on another system.

System	Status	Priority	Updated
morris	new	7.0	2026-10-20T10:18:50Z	Open

Description

An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.

Update status

Add note only

References

NVD: CVE-2020-29361