In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

Affected: openEuler:20.03-LTS-SP1: swtpm, openEuler:20.03-LTS-SP3: swtpm, openEuler:22.03-LTS: swtpm

TPM emulator built on libtpms providing TPM functionality for QEMU VMs Security Fix(es): ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.(CVE-2020-28407)

swtpm-0.6.1-1.1 on GA media

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: swtpm

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.