Swtpm Project Swtpm
2 CVEs affecting Swtpm Project Swtpm. Latest disclosed: 2023-11-03. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28407 | High | 7.1 | 2023-11-03 | In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as T… |
CVE-2022-23645 | Medium | 6.2 | 2022-02-18 | swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-… |