{
  "cveId": "CVE-2017-16837",
  "url": "https://patchblox.com/security/cve/CVE-2017-16837",
  "summary": "CVE-2017-16837 is fixed in tboot on 1 platform, first by tboot 1.9.7-0ubuntu1, released November 15, 2017. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "tboot: Certain function pointers in Trusted Boot (tboot) through 1.9.6 are notvalidated and can cause arbitrary code executi...",
  "description": "Certain function pointers in Trusted Boot (tboot) through 1.9.6 are notvalidated and can cause arbitrary code execution, which allows local usersto overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking thesefunction pointers.",
  "published": "2017-11-15T18:29:00Z",
  "severity": "Medium",
  "epss": 0.00413,
  "epssPercentile": 0.35802,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "tboot",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.9.7-0ubuntu1",
      "fix": "tboot 1.9.7-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-tboot-1.9.7-0ubuntu1",
      "released": "2017-11-15T18:29:00Z"
    },
    {
      "platform": "linux",
      "product": "tboot",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "1.9.7-0ubuntu1",
      "fix": "tboot 1.9.7-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-tboot-1.9.7-0ubuntu1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "tboot",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "1.9.7-0ubuntu1",
      "fix": "tboot 1.9.7-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-tboot-1.9.7-0ubuntu1",
      "released": "2026-01-16T01:42:24Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}