PT-2019-7122 · Intel+1 · Tboot+1

Published 2017-11-29 · Updated 2020-01-10 · CVE-2014-5118

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions tboot versions prior to 1.8.2

Description The issue is related to a security bypass vulnerability in the loader.c component.

Recommendations For versions prior to 1.8.2, update to version 1.8.2 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-5118

SUSE-SU-2017:3114-1

SUSE-SU-2017_3114-1

Affected Products

Suse

Tboot

References · 14

• https://osv.dev/vulnerability/SUSE-SU-2017:3114-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-5118 · Security Note
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Note
• http://securityfocus.com/bid/68960 · Note
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136768.html · Note
• https://suse.com/security/cve/CVE-2014-5118 · Note
• https://bugzilla.suse.com/889339 · Note
• http://openwall.com/lists/oss-security/2014/07/30/4 · Note
• https://bugzilla.suse.com/1057555 · Note
• https://suse.com/support/update/announcement/2017/suse-su-20173114-1 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95063 · Note
• https://suse.com/security/cve/CVE-2014-5118.html · Note
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136778.html · Note
• https://lists.suse.com/pipermail/sle-security-updates/2017-November/003421.html · Note