Most recent entries from all

EUVD-2026-162944

fkie_cve-2020-28407

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

GHSA-52x8-2f4w-q8mm

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

gsd-2020-28407

OESA-2022-1741 — swtpm security update

Affected: openEuler:20.03-LTS-SP1: swtpm, openEuler:20.03-LTS-SP3: swtpm, openEuler:22.03-LTS: swtpm

TPM emulator built on libtpms providing TPM functionality for QEMU VMs Security Fix(es): ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.(CVE-2020-28407)

openSUSE-SU-2024:11416-1 — swtpm-0.6.1-1.1 on GA media

swtpm-0.6.1-1.1 on GA media

Withdrawn: UBUNTU-CVE-2020-28407

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: swtpm

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.