oss-sec mailing list archives
CVE Request: tboot failing to measure commandline parameters
From: Marcus Meissner <meissner () suse de>
Date: Tue, 29 Jul 2014 11:30:53 +0200
Hi, The trusted boot loader module "tboot" did not measure all commandline parameters, which made it possible to pretend a measured boot while there was workaround possibility (breaking the measured boot chain). All previous tboot versions < 1.8.2 are affected. http://sourceforge.net/p/tboot/code/ci/0efdaf7c5348701484d24562e6e5323d85bb94d3/ http://sourceforge.net/p/tboot/mailman/message/32655538/ http://sourceforge.net/p/tboot/mailman/message/32659733/ A CVE is needed I think. Ciao, Marcus
Current thread:
- CVE Request: tboot failing to measure commandline parameters Marcus Meissner (Jul 29)
- Re: CVE Request: tboot failing to measure commandline parameters cve-assign (Jul 30)