- Reported
-
- Issued
-
- Package
-
cryptoki
(crates.io)
- Type
-
Vulnerability
- Categories
-
- Keywords
-
#pkcs11
#out-of-bounds-read
#undefined-behavior
- Aliases
-
- References
-
- Patched
-
>=0.10.1, <0.11.0>=0.11.1, <0.12.0>=0.12.1
Description
cryptoki treated the CKA_ALLOWED_MECHANISMS ulValueLen byte count as a
CK_MECHANISM_TYPE element count. A valid nonempty attribute returned through
the safe Session::get_attributes API could cause construction of an
out-of-bounds slice and undefined behavior.
Possible consequences include a process crash or denial of service and
potential disclosure of adjacent heap words. Upgrade to the fixed patch release
for the cryptoki 0.10, 0.11, or 0.12 line.
Advisory available under CC0-1.0
license.