Lucene search

K
oraclelinuxOracleLinuxELSA-2022-9240
HistoryMar 22, 2022 - 12:00 a.m.

libtpms security update

2022-03-2200:00:00
linux.oracle.com
26

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

libtpms
[0.8.8-1.el7]

  • spec: Update spec file to version 0.8.8
  • Fri Sep 17 2021 Stefan Berger - 0.8.7-1
  • tpm2: Fixes for building and running with OpenSSL 3.0
  • Fri Sep 10 2021 Stefan Berger - 0.8.6-1
  • tpm2: Marshal event sequence objects’ hash state
  • Wed Sep 01 2021 Stefan Berger - 0.8.5-1
  • tpm2: NVMarshal: Handle index orderly RAM without 0-sized terminating node
  • tpm2: Initialize a whole OBJECT before using it
  • Wed Jun 23 2021 Stefan Berger - 0.8.4-1
  • tpm2: Reset too large size indicators in TPM2B to avoid access beyond buffer
  • Tue Jun 01 2021 Stefan Berger - 0.8.3-1
  • tpm2: Work-around for Windows 2016 & 2019 bug related to ContextLoad
    swtpm
    [0.3.4-5.el7]
  • swtpm: Check header size indicator against expected size (CID 375869) (Stefan
    Berger) [Orabug: 33876933] {CVE-2022-23645}

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P