tocsin

Alpine/swtpm: medium 6.1

An out-of-bounds read vulnerability was found in swtpm's SWTPM_NVRAM_CheckHeader() function. The entry guard checks the buffer length against sizeof(bh), where bh is a pointer, instead of sizeof(*bh),

Action: Upgrade swtpm to 0.10.2 or later.

Affected

introducedfixedlast affected
00.10.2-

Fixed versions

0.10.2

Sources

published · modified · JSON