Skip to content
OpenAdvisories

Product · DMTF

libspdm

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    DMTF-2023-0001: SPDM mutual authentication bypass

    libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPDM session establishment in libspdm prior to version 2.3.1. If a device supports both DHE session and PSK session with mutual authentication…