Skip to content
OpenAdvisories

Package · Go

github.com/google/go-tpm

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2020-8918

    TPM 1.2 key authorization values are vulnerable to a TPM transport eavesdropper

    An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions prior to 0.3.0 can lead an eavesdropping attacker to discover the auth value for a key created with CreateWrapKey. An attacker listening in on the channel can collect b…

    Google google/go-tpm library github.com/google/go-tpm Go