Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
swtpm project swtpm vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2020-28407
In swtpm prior to 0.4.2 and 0.5.x prior to 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.
Swtpm Project Swtpm
Swtpm Project Swtpm 0.5.0
2.1
CVSSv2
CVE-2022-23645
swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions before 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an inva...
Swtpm Project Swtpm 0.7.0
Swtpm Project Swtpm
Redhat Enterprise Linux 8.0
Fedoraproject Fedora 35
2.1
CVSSv2
CVE-2021-3569
A stack corruption bug was found in libtpms in versions prior to 0.7.2 and prior to 0.8.0 while decrypting data using RSA. This flaw could result in a SIGBUS (bad memory access) and termination of swtpm. The highest threat from this vulnerability is to system availability.
Libtpms Project Libtpms
Redhat Enterprise Linux 8.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671
unauthorized
CVE-2024-4776
CVE-2024-3407
CVE-2024-26026
CVE-2024-32888
wireless
CVE-2024-4656
template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started