Security Bulletin: The following vulnerability that can affect IBM Storage Scale System and TPM is now fixed in Storage Scale System 6.2.3.6 and 7.0.1.0 or higher

Summary The following vulnerability, which can affect IBM Storage Scale System and TPM could provide weaker-than-expected security, is now fixed in Storage Scale System 6.2.3.6 and 7.0.1.0 or higher CVE-2025-2884 Vulnerability Details CVEID:CVE-2025-2884 DESCRIPTION: TCG TPM2.0 Reference...

HPESBHF04881 rev.1 - HPE SimpliVity Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-01209 - Intel PTT and SPS Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE SimpliVity Gen10 Support Pack SVTSPGen10 v20250630 HPE SimpliVity 380 Gen10 G - Prior to HPE SimpliVity Gen10 Support Pack SVTSPGen10...

Security Bulletin: This Power System update is being released to address CVE-2025-2884

Summary The PowerVM Virtual Trusted Platform Module vTPM feature is impacted by the referenced vulnerability. Vulnerability Details CVEID:CVE-2025-2884 DESCRIPTION: TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validatio...

CVE-2025-2884

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0...

CVE-2025-2884

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0...

CVE-2025-2884

creationtimestamp| type| source ---|---|--- 2025-06-10 17:53:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114660344390922177 2025-06-10 18:32:39+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3lrbjpwtfoc2j 2025-06-11 15:32:04+00:00| seen|...

CVE-2025-2884 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0...

CVE-2025-2884 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0...

CVE-2025-2884 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0...

CVE-2025-2884

The TCG TPM2.0 Reference implementation contains an Out-of-Bounds read vulnerability in the CryptHmacSign helper function. This is caused by a lack of validation when checking the signature scheme against the signature key's algorithm. The flaw could allow an attacker to disclose protected inform...

Intel® PTT and SPS Advisory

Summary: A potential security vulnerability for some Intel® PTT and Intel® SPS firmware may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-2884 Non-Intel issued Description: Out-of-bounds read in the...