Linuxfoundation Edge Virtualization Engine vulnerabilities

5 CVEs affecting Linuxfoundation Edge Virtualization Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-43632, published 2023-09-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-43632, published 2023-09-21. Critical severity, CVSS 9.9. EPSS: 0.7% chance of exploitation in the next 30 days. As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the clients. VTPM allows clients to execute…
CVE-2023-43631, published 2023-09-21. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. On boot, the Pillar eve container checks for the existence and content of “/config/authorized_keys”. If the file is present, and contains a supported public key, the container will go on to…
CVE-2023-43636, published 2023-09-20. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. In EVE OS, the “measured boot” mechanism prevents a compromised device from accessing the encrypted data located in the vault. As per the “measured boot” design, the PCR values calculated at…
CVE-2023-43635, published 2023-09-20. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. Vault Key Sealed With SHA1 PCRs The measured boot solution implemented in EVE OS leans on a PCR locking mechanism. Different parts of the system update different PCR values in the TPM,…
CVE-2023-43630, published 2023-09-20. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but due to the change that was implemented in commit “7638364bc0acf8b5c481b5ce5fea11ad44ad7fd4”, fixing this issue alone would not…