Swtpm Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Swtpm Project records in CISA KEV

No Swtpm Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Swtpm 2 records LOW

Records

2 records in Swtpm · all components

TI-2020-17235 CVE-2020-28407 · GHSA-52x8-2f4w-q8mm

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite…

LOW 33

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00279 Published 2023-11-03 Will not fix CWE-59

TI-2022-07697 CVE-2022-23645

Out-of-bounds read in swtpm

LOW 28

swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00404 Published 2022-02-18 Partial fix · 0.5.3, 0.6.2 CWE-125

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0