Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-28407
7.1
HIGHCVSS v3
Published
November 3, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.
stefanberger/swtpm
GitHubLibtpms-based TPM emulator with socket, character device, and Linux CUSE interface.
GitHubLibtpms-based TPM emulator with socket, character device, and Linux CUSE interface.< 0.4.2, = 0.5.0NVD