← CVE Intelligence

CVE-2026-13757

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing PUBLISHED

Description (CNA)

A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:0.26.4-1.el10_2 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:0.26.4-1.el9_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:0.26.4-1.el9_8 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371080 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371069 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791788287 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791378395 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791970484 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459707 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459711 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459759 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1789029076 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791966259 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790223279 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790223719 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790272426 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589998 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589912 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589914 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589855 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790598593 before *
Red Hat / Cost Management 4unaffected 1790844333 before *
Red Hat / Red Hat Discovery 2unaffected 1786638573 before *
Red Hat / Red Hat Discovery 2unaffected 1786634825 before *
Red Hat / Red Hat Hardened Imagesunaffected 0.26.2-1.2.hum1 before *
Red Hat / Red Hat Hardened Imagesunaffected 0.26.4-1.hum1 before *
Red Hat / Red Hat Insights proxy 1.5unaffected 1786433656 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786435241 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786533457 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786533449 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786435483 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786533529 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241211 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787135742 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241260 before *
Red Hat / Red Hat Enterprise Linux 6affected
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4affected

CWE

CWE-674

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.