Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
swtpm project swtpm vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2020-28407
In swtpm prior to 0.4.2 and 0.5.x prior to 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.
Swtpm Project Swtpm
Swtpm Project Swtpm 0.5.0
188
VMScore
CVE-2022-23645
swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions before 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an inva...
Swtpm Project Swtpm 0.7.0
Swtpm Project Swtpm
Redhat Enterprise Linux 8.0
Fedoraproject Fedora 35
187
VMScore
CVE-2021-3569
A stack corruption bug was found in libtpms in versions prior to 0.7.2 and prior to 0.8.0 while decrypting data using RSA. This flaw could result in a SIGBUS (bad memory access) and termination of swtpm. The highest threat from this vulnerability is to system availability.
Libtpms Project Libtpms
Redhat Enterprise Linux 8.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-40673
CVE-2024-36674
CVE-2024-27348
unspecified
CVE-2024-24919
CVE-2024-4870
malicious code
CVE-2024-2019
hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started