CVE-2023-43636
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-43636 is a vulnerability in EVE OS where the "measured boot" mechanism, designed to prevent unauthorized access to encrypted data, fails to validate the entire root filesystem. An attacker can manipulate specific parts of the system, such as BIOS, grub, or kernel cmdline, without altering PCR values and bypass the "measured boot" mechanism. This allows the attacker to gain full control over the device and access the vault. The default squashfs filesystem used by EVE OS is harder to edit compared to ext4, but an attacker can still repackage the squashfs with their changes and replace the partition. The issue was partially addressed in commits aa3501d6c572206ced222c33aea15a9169d629141 and 5fef4d92e75838cc78010edaed5247dfbdae1889, which added the config partition measurement to PCR13, but the vulnerability was first made viable in version 9.0.0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Linux Foundation
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions