Heist/ feed

Security feed

advisoryOfficial CVE List

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.

Red Hat Enterprise Linux 10Red Hat Enterprise Linux 9Red Hat Enterprise Linux 9Cert Manager support for Red Hat OpenShift release 1.17Cert Manager support for Red Hat OpenShift release 1.17Cert Manager support for Red Hat OpenShift release 1.17Cert Manager support for Red Hat OpenShift release 1.17Cert Manager support for Red Hat OpenShift release 1.17Cert Manager support for Red Hat OpenShift release 1.18Cert Manager support for Red Hat OpenShift release 1.18Cert Manager support for Red Hat OpenShift release 1.18Cert Manager support for Red Hat OpenShift release 1.18Cert Manager support for Red Hat OpenShift release 1.18Cert Manager support for Red Hat OpenShift release 1.20Cert Manager support for Red Hat OpenShift release 1.20Cert Manager support for Red Hat OpenShift release 1.20Cert Manager support for Red Hat OpenShift release 1.20Cert Manager support for Red Hat OpenShift release 1.20Cert Manager support for Red Hat OpenShift release 1.20Cert Manager support for Red Hat OpenShift release 1.20Cert Manager support for Red Hat OpenShift release 1.20Cost Management 4Red Hat Discovery 2Red Hat Discovery 2Red Hat Hardened ImagesRed Hat Hardened ImagesRed Hat Insights proxy 1.5Red Hat Update Infrastructure 5Red Hat Update Infrastructure 5Red Hat Update Infrastructure 5Red Hat Update Infrastructure 5Red Hat Update Infrastructure 5Red Hat Update Infrastructure 5Red Hat Update Infrastructure 5Red Hat Update Infrastructure 5Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat OpenShift Container Platform 4Red Hat OpenShift Container Platform 4CVE-2026-13757
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-13757

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/2/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.17

Source reference: /containers/cna/affected/3/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.17

Source reference: /containers/cna/affected/4/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.17

Source reference: /containers/cna/affected/5/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.17

Source reference: /containers/cna/affected/6/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.17

Source reference: /containers/cna/affected/7/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.18

Source reference: /containers/cna/affected/8/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.18

Source reference: /containers/cna/affected/9/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.18

Source reference: /containers/cna/affected/10/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.18

Source reference: /containers/cna/affected/11/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.18

Source reference: /containers/cna/affected/12/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.20

Source reference: /containers/cna/affected/13/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.20

Source reference: /containers/cna/affected/14/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.20

Source reference: /containers/cna/affected/15/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.20

Source reference: /containers/cna/affected/16/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.20

Source reference: /containers/cna/affected/17/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.20

Source reference: /containers/cna/affected/18/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.20

Source reference: /containers/cna/affected/19/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.20

Source reference: /containers/cna/affected/20/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cost Management 4

Source reference: /containers/cna/affected/21/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Discovery 2

Source reference: /containers/cna/affected/22/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Discovery 2

Source reference: /containers/cna/affected/23/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Hardened Images

Source reference: /containers/cna/affected/24/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Hardened Images

Source reference: /containers/cna/affected/25/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Insights proxy 1.5

Source reference: /containers/cna/affected/26/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/27/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/28/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/29/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/30/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/31/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/32/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/33/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/34/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 6

Source reference: /containers/cna/affected/35/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 7

Source reference: /containers/cna/affected/36/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/37/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/38/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/39/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2026-13757

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#23066 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement