Executive brief
EVE: SSH as Root Unlockable Without Triggering Measured Boot in github.com/lf-edge/eve
Affected products
- Go github.com/lf-edge/eve
Junglewise Threat Intelligence
CVE-2023-43631: GO-2026-4418 - EVE: SSH as Root Unlockable Without Triggering Measured Boot in github.com/lf-edge/eve
CVE-2023-43631 · Severity: low · CVSS 3.1 · Published 2026-02-05
Technologies: github.com/lf-edge/eve (Go). Vendors: Go.
Related threats
- GO-2026-4435 - EVE Doesn't Protect Rootfs in github.com/lf-edge/eve
- GO-2026-4436 - EVE Has Partially Predetermined Vault Key in github.com/lf-edge/eve
- GO-2026-4434 - EVE Seals Vault Key With SHA1 PCRs in github.com/lf-edge/eve
- GO-2026-4432 - EVE Doesn't Protect Config Partition with Measured Boot in github.com/lf-edge/eve
- GO-2026-4422 - EVE Freely Allocates Buffer on The Stack With Data From Socket in github.com/lf-edge/eve