cve.bz

dmtf libspdm vulnerabilities in 2023, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 7.5CVE-2023-32690EPSS 0.7%

    libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without val…

  2. 8.8CVE-2023-31127EPSS 0.9%

    libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPDM session establishment in libspdm prior to version 2.3.1. If a device supports both DHE session and PSK session with m…