What is CVE-2023-43632?

CVE-2023-43632 is a critical-severity vulnerability in Lf-edge, Zededa Eve Os, classified under CWE-789. CVSS score: 9.0/10. Published 2023-09-21.

How severe is CVE-2023-43632?

Critical severity. CVSS v3 base score is 9.0 out of 10.

Resource exhaustion in Lf-edge, Zededa Eve Os

CVE-2023-43632

As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the clients. VTPM allows clients to execute tpm2-tools binaries from a list of hardcod…

EPSS: 0.005 (41.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Lf-edge, Zededa Eve Os — versions 3.0.0
Linuxfoundation Edge_virtualization_engine

Weakness classification (CWE)

CWE-789
CWE-770 — Allocation of Resources Without Limits or Throttling

References

cve@asrg.io

Frequently asked questions

What is CVE-2023-43632?: CVE-2023-43632 is a critical-severity vulnerability in Lf-edge, Zededa Eve Os, classified under CWE-789. CVSS score: 9.0/10. Published 2023-09-21.
How severe is CVE-2023-43632?: Critical severity. CVSS v3 base score is 9.0 out of 10.