225 matches found
CVE-2020-28407: Improper Link Resolution Before File Access
In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall...
CVE-2020-28407
In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall...
CVE-2020-28407
CVE-2020-28407 affects the TPM emulator product swtpm (versions before 0.4.2 and 0.5.x before 0.5.1). A local attacker can overwrite arbitrary files via a symlink attack against a temporary file (e.g., TMP2-00.permall). The issue is achievable with local access and does not require user interacti...
CVE-2020-28407
In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall...
kvm_utils2 security update
hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt 7.10.0-3.el8 - virpci: Resolve leak in virPCIVirtualFunctionList cleanup Tim Shearer Orabug: 35395469 CVE-2023-2700 libvirt-dbus libvirt-python 7.10.0-3.el8 - Update version number to match libvirt 7.10.0-3 Karl Heubaum nbdkit...
swtpm bug fix and enhancement update
An update is available for swtpm. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.2...
SUSE CVE-2020-28407
In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall...
SUSE CVE-2022-23645
swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an...
swtpm bug fix and enhancement update
An update is available for swtpm. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The swtpm package provides TPM emulator built on libtpms providing TPM...
swtpm security and bug fix update
0.7.0-3.20211109gitb79fd91 - Disable OpenSSL FIPS mode to avoid libtpms failures Resolves: rhbz2090219 0.7.0-2.20211109gitb79fd91 - Add fix for CVE-2022-23645. Resolves: rhbz2056518...
Oracle Linux 9 : swtpm (ELSA-2022-8100)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8100 advisory. 0.7.0-3.20211109gitb79fd91 - Disable OpenSSL FIPS mode to avoid libtpms failures Resolves: rhbz2090219 0.7.0-2.20211109gitb79fd91 - Add fix for CVE-2022-23645...
AlmaLinux 9 : swtpm (ALSA-2022:8100)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8100 advisory. - swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to...
Low: Red Hat Security Advisory: swtpm security and bug fix update
An update for swtpm is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
swtpm: Unchecked header size indicator against expected size
An out-of-bounds read vulnerability was found in swtpm. The vulnerability exists due to a boundary condition when the byte array representing the state of the TPM is accessed. This flaw allows an attacker to send a specially crafted header, triggering an out-of-bounds read access on the byte arra...
Low: swtpm security and bug fix update
SWTPM is a TPM emulator built on libtpms providing TPM functionality for QEMU VMs. Security Fixes: swtpm: Unchecked header size indicator against expected size CVE-2022-23645 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
RHEL 9 : swtpm (RHSA-2022:8100)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8100 advisory. SWTPM is a TPM emulator built on libtpms providing TPM functionality for QEMU VMs. Security Fixes: swtpm: Unchecked header size indicator against...
AlmaLinux 8 : virt:rhel and virt-devel:rhel (ALSA-2022:7472)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7472 advisory. QEMU: fdc: heap buffer overflow in DMA read data transfers CVE-2021-3507 libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of...
ALSA-2022:8100 Low: swtpm security and bug fix update
SWTPM is a TPM emulator built on libtpms providing TPM functionality for QEMU VMs. Security Fixes: swtpm: Unchecked header size indicator against expected size CVE-2022-23645 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
NewStart CGSL MAIN 6.02 : swtpm Vulnerability (NS-SA-2022-0101)
The remote NewStart CGSL host, running version MAIN 6.02, has swtpm packages installed that are affected by a vulnerability: - swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds...
OESA-2022-2049 swtpm security update
TPM emulator built on libtpms providing TPM functionality for QEMU VMs Security Fixes: swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm...