K000132856 : TPM 2.0 vulnerabilities CVE-2023-1017 and CVE-2023-1018

Security Advisory Description

Two buffer overflow vulnerabilities were discovered in the Trusted Platform Module (TPM) 2.0 reference library specification, currently at Level 00, Revision 01.59 November 2019. An attacker who has access to a TPM-command interface can send maliciously-crafted commands to the module and trigger these vulnerabilities. This allows either read-only access to sensitive data or overwriting of normally protected data that is only available to the TPM (e.g., cryptographic keys). (VU#782720)

Impact

There is no impact; F5 products are not affected by this vulnerability.