EUVD-2023-36923

Malicious code in bioql PyPI...

EUVD-2023-35451

Malicious code in bioql PyPI...

libspdm:test_spdm_transport_storage_decode_message: Stack-use-after-return in libspdm_copy_mem

Detailed Report: https://oss-fuzz.com/testcase?key=5678439174832128 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmtransportstoragedecodemessage Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Stack-use-after-return WRITE 1 Crash Address: 0x7b6a5e900030 Crash State:...

CVE-2023-32690

libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Requester sends a request message that...

libspdm:test_spdm_decode_secured_message: Heap-buffer-overflow in mbedtls_gcm_auth_decrypt

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=5089262226702336 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmdecodesecuredmessage Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_test_responder_chunk_send_ack_case1

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=6712269464469504 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

PT-2024-40683 · Libspdm · Libspdm

Name of the Vulnerable Software and Affected Versions: libspdm affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the libspdm copy mem function and the libspdm get response chunk send function. No information...

libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_copy_mem

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=5274620108275712 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_copy_mem

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=6677017594494976 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_test_responder_chunk_send_ack_case1

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=6659911863828480 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

libspdm Authentication Bypass

The vulnerability of the libspdm library is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to intercept a user’s session remotely...

libspdm Insufficient Validation DoS

The vulnerability of the libspdm library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

CVE-2023-32690

libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Requester sends a request message that...

CVE-2023-32690 Responder can Invoke Undefined Behavior in libspdm Requester

libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Requester sends a request message that...

CVE-2023-32690 Responder can Invoke Undefined Behavior in libspdm Requester

libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Requester sends a request message that...

CVE-2023-32690

libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Requester sends a request message that...

CVE-2023-32690

Summary: libspdm (DMTF SPDM) prior to versions 2.3.3 and 3.0 stores the responder’s CTExponent after a CAPABILITIES response without validation. If a cryptographic operation is later requested (e.g., CHALLENGE), the requester uses the unvalidated CTExponent to compute a timeout, enabling potentia...

CVE-2023-32690 Responder can Invoke Undefined Behavior in libspdm Requester

libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Requester sends a request message that...

CVE-2023-32690: Improper Input Validation

libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Requester sends a request message that...

PT-2023-5344 · Libspdm · Libspdm

Name of the Vulnerable Software and Affected Versions: libspdm versions prior to 2.3.3 libspdm versions prior to 3.0 Description: The issue arises due to insufficient validation of input data in the libspdm library. This can be exploited by a remote attacker to cause a denial of service. When a...