All products

github.com/lf-edge/eve

Go · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
EVE Has Partially Predetermined Vault KeyCVE-2023-43637 · GHSA-G7VP-J25F-H34PVersion ranges need review. github.com/lf-edge/eve Go Medium Fix reported
EVE Seals Vault Key With SHA1 PCRsCVE-2023-43635 · GHSA-4JVR-VJ2C-8Q37Version ranges need review. github.com/lf-edge/eve Go Medium Fix reported
EVE Doesn't Protect RootfsCVE-2023-43636 · GHSA-5H7V-G49C-H887 github.com/lf-edge/eve/pkg/grubgithub.com/lf-edge/eve Go Medium Fix reported
EVE Doesn't Measure Config Partition From 2 FrontsCVE-2023-43630 · GHSA-PHCG-H58R-GMCQVersion ranges need review. github.com/lf-edge/eve Go Medium Fix reported
EVE Doesn't Protect Config Partition with Measured BootCVE-2023-43634 · GHSA-WC42-FCJP-V8VQVersion ranges need review. github.com/lf-edge/eve Go Medium Fix reported
EVE's Debug Functions Unlockable Without Triggering Measured BootCVE-2023-43633 · GHSA-4C4V-42HC-72P6Version ranges need review. github.com/lf-edge/eve Go Medium Fix reported
EVE: SSH as Root Unlockable Without Triggering Measured BootCVE-2023-43631 · GHSA-3MQ9-XHGQ-R7GJVersion ranges need review. github.com/lf-edge/eve Go Medium Fix reported
EVE Freely Allocates Buffer on The Stack With Data From SocketCVE-2023-43632 · GHSA-6JP5-GRGH-JW42Version ranges need review. github.com/lf-edge/eve Go Medium Fix reported