CVE-2017-16837 | BDVDB-2026-93058 Detail

Description#

Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking these function pointers.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://sourceforge.net/p/tboot/code/ci/521c58e51eb5be105a29983742850e72c44ed80e/
https://www.usenix.org/conference/usenixsecurity18/presentation/han

Exploit#

No public exploit known

History#

Version 12017-11-16Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.