Search vulnerabilities

Results 2

Export CSV
CVE-2017-16837

tboot: Incorrect validation of certain function pointers

Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking these function pointers.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Products