libspdm vulnerabilities

2 known vulnerabilities in libspdm from DMTF. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  libspdm is a sample implementation that follows the DMTF SPDM specifications.

  CVE-2023-32690Jun 1, 2023DMTF

  libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Reque

• 8.8 High severity

  libspdm: Improper Authentication

  CVE-2023-31127May 8, 2023DMTF

  libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPDM session establishment in libspdm prior to version 2.3.1. If a device supports both DHE session and PSK session with mutual authentication,