https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:06:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-187635 EUVD-2026-187635 https://cve.radiocsirt.org/vuln/euvd-2026-187635 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43636 <p>In EVE OS, the “measured boot” mechanism prevents a compromised device from accessing the encrypted data located in the vault.</p> <p>As per the “measured boot” design, the PCR values calculated at different stages of the boot process will change if any of their respective parts are changed.</p> <p>This includes, among other things, the configuration of the bios, grub, the kernel cmdline, initrd, and more.</p> <p>However, this mechanism does not validate the entire rootfs, so an attacker can edit the filesystem and gain control over the system.</p> <p>As the default filesystem used by EVE OS is squashfs, this is somewhat harder than an ext4, which is easily changeable.</p> <p>This will not stop an attacker, as an attacker can repackage the squashfs with their changes in it and replace the partition altogether.</p> <p>This can also be done directly on the device, as the “003-storage-init” container contains the “mksquashfs” and “unsquashfs” binaries (with the corresponding libs).</p> <p>An attacker can gain full control over the device without changing the PCR values, thus not triggering the “measured boot” mechanism, and having full access to the vault.</p> <p>Note:</p> <p>This issue was partially fixed in these commits (after disclosure to Zededa), where the config partition measurement was added to PCR13:</p> <p>• aa3501d6c57206ced222c33aea15a9169d629141</p> <p>• 5fef4d92e75838cc78010edaed5247dfbdae1889.</p> <p>This issue was made viable in version 9.0.0 when the calculation was moved to PCR14 but it was not included in the measured bo…</p> <p>In EVE OS, the “measured boot” mechanism prevents a compromised device from accessing the encrypted data located in the vault.</p> <p>As per the “measured boot” design, the PCR values calculated at different stages of the boot process will change if any of their respective parts are changed.</p> <p>This includes, among other things, the configuration of the bios, grub, the kernel cmdline, initrd, and more.</p> <p>However, this mechanism does not validate the entire rootfs, so an attacker can edit the filesystem and gain control over the system.</p> <p>As the default filesystem used by EVE OS is squashfs, this is somewhat harder than an ext4, which is easily changeable.</p> <p>This will not stop an attacker, as an attacker can repackage the squashfs with their changes in it and replace the partition altogether.</p> <p>This can also be done directly on the device, as the “003-storage-init” container contains the “mksquashfs” and “unsquashfs” binaries (with the corresponding libs).</p> <p>An attacker can gain full control over the device without changing the PCR values, thus not triggering the “measured boot” mechanism, and having full access to the vault.</p> <p>Note:</p> <p>This issue was partially fixed in these commits (after disclosure to Zededa), where the config partition measurement was added to PCR13:</p> <p>• aa3501d6c57206ced222c33aea15a9169d629141</p> <p>• 5fef4d92e75838cc78010edaed5247dfbdae1889.</p> <p>This issue was made viable in version 9.0.0 when the calculation was moved to PCR14 but it was not included in the measured bo…</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-43636 https://cve.radiocsirt.org/vuln/ghsa-5h7v-g49c-h887 <p><strong>Affected:</strong> Go: github.com/lf-edge/eve/pkg/grub</p> <p>### Impact</p> <p>Measured boot validates BIOS, grub, kernel cmdline, and initrd but not the entire rootfs. Thus, an attacker can create an EVE-OS rootfs squashfs image with some files modified and take out the disk and replace the existing rootfs image without that being detected by measure boot and remote attestation.</p> <p>### Patches</p> <p>Fixed in 8.6.0 and 8.12.1-lts</p> <p>### Workarounds</p> <p>None</p> <p><strong>Affected:</strong> Go: github.com/lf-edge/eve/pkg/grub</p> <p>### Impact</p> <p>Measured boot validates BIOS, grub, kernel cmdline, and initrd but not the entire rootfs. Thus, an attacker can create an EVE-OS rootfs squashfs image with some files modified and take out the disk and replace the existing rootfs image without that being detected by measure boot and remote attestation.</p> <p>### Patches</p> <p>Fixed in 8.6.0 and 8.12.1-lts</p> <p>### Workarounds</p> <p>None</p> https://cve.radiocsirt.org/vuln/ghsa-5h7v-g49c-h887 https://cve.radiocsirt.org/vuln/gsd-2023-43636 gsd-2023-43636 https://cve.radiocsirt.org/vuln/gsd-2023-43636