Skip to content

TEST_KEY used in example dcp_tool reference implementation

Moderate
abarisani published GHSA-g85c-rh49-p8cq Jun 27, 2024

Package

No package listed

Affected versions

>= 146588ca09945647364ad6fd6cedf2615dca6151

Patched versions

>= e5a99cb3d9429e6145495da7d01525c75af426a7

Description

The dcp_tool reference implementation included in the repository selected the test key, regardless of its -t argument, after and including a commit on 2024/04/02 (146588c) and before a fix has been merged on 2024/06/27 (e5a99cb).

This does not affect the mxs-dcp kernel module itself but just the reference implementation.

Severity

Moderate

CVE ID

CVE-2024-38532

Weaknesses

No CWEs

Credits