CVE-2020-29361

An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.

• CWE-190

• https://github.com/p11-glue/p11-kit/releasesRelease Notes, Third Party Advisory
• https://github.com/p11-glue/p11-kit/security/advisories/GHSA-q4r3-hm6m-mvc2Third Party Advisory
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.debian.org/debian-lts-announce/2021/01/msg00002.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2021/dsa-4822Third Party Advisory
• https://github.com/p11-glue/p11-kit/releasesRelease Notes, Third Party Advisory
• https://github.com/p11-glue/p11-kit/security/advisories/GHSA-q4r3-hm6m-mvc2Third Party Advisory
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.debian.org/debian-lts-announce/2021/01/msg00002.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2021/dsa-4822Third Party Advisory

Published

Dec 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-29323The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerab…7.5
• CVE-2020-29324The DLink Router DIR-895L MFC v1.21b05 is vulnerable to cred…7.5
• CVE-2020-2933Vulnerability in the MySQL Connectors product of Oracle MySQ…2.2
• CVE-2020-2934Vulnerability in the MySQL Connectors product of Oracle MySQ…5
• CVE-2020-2935Vulnerability in the Oracle Financial Services Hedge Managem…7.1
• CVE-2020-2936Vulnerability in the Oracle Financial Services Balance Sheet…7.1
• CVE-2020-29362An issue was discovered in p11-kit 0.21.1 through 0.23.21. A…5.3
• CVE-2020-29363An issue was discovered in p11-kit 0.23.6 through 0.23.21. A…7.5
• CVE-2020-29364In NetArt News Lister 1.0.0, the news headlines vulnerable t…4.8
• CVE-2020-29367blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-b…7.8
• CVE-2020-29368An issue was discovered in __split_huge_pmd in mm/huge_memor…7
• CVE-2020-29369An issue was discovered in mm/mmap.c in the Linux kernel bef…7