CVE-2017-16837 Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module....
HighCVSS 7.8
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking these function pointers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trusted boot project trusted boot | = 1.9.6 | No fix listed |
References
- sourceforge.net issue-tracking patch third-party-advisory
- www.usenix.org
- Debian Security Tracker CVE-2017-16837 vendor-advisory