Known vulnerabilities in swtpm
Vendor:
Stefan Berger
Software:
swtpm
Software CPE:
cpe:2.3:a:stefanberger:swtpm:*:*:*:*:*:*:*:*
Website:
https://github.com/stefanberger
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU60731 - Out-of-bounds read CVE-2022-23645 |
CWE-125 | Medium | 0.5.3, 0.6.2, 0.7.1 | 21.02.2022 |
SB2022022107 SB2022111438 SB2022111546 and 5 more |
||
| #VU48570 - UNIX Symbolic Link (Symlink) Following CVE-2020-28407 |
CWE-61 | Low | 0.5.1 | 20.11.2020 |
SB2020112007 SB2020112008 SB2022070830 and 3 more |