AZL-69129 CVE-2023-22745 affecting package tpm2-tss for versions less than 4.0.1-1

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array...

DEBIAN-CVE-2023-22745

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array...

CVE-2023-22745

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array...

AZL-13055 CVE-2023-22745 affecting package tpm2-tss for versions less than 2.4.6-2

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array...

CVE-2023-22745

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array...

UBUNTU-CVE-2023-22745

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array...

CVE-2023-22745

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array...

CVE-2023-22745

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, "Tss2RCSetHandler" and "Tss2RCDecode" both index into "layerhandler" with an 8 bit layer number, but the...

CVE-2023-22745

CVE-2023-22745 affects tpm2-tss: prior to versions 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2_RC_SetHandler and Tss2_RC_Decode index into layer_handler with an 8-bit layer number while the array has TPM2_ERROR_TSS2_RC_LAYER_COUNT entries, allowing a buffer overrun. This can read/write past the buffer ...

CVE-2023-22745 Buffer Overlow in TSS2_RC_Decode in tpm2-tss

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array...

PT-2023-6784

Name of the Vulnerable Software and Affected Versions tpm2-tss versions affected versions not specified Description The issue is related to the Tss2 RC SetHandler and Tss2 RC Decode functions in the tpm2-tss implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software...

CVE-2023-22745: Buffer Copy without Checking Size of Input

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array...

Microsoft Edge Heap Buffer Overflow RCE

The vulnerability of Microsoft Edge relates to the issue of operations going beyond the buffer boundaries in memory when processing HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Internet Key Exchange Protocol Daemon DoS

The vulnerability of the Internet Key Exchange Protocol Daemon iked in JunOS operating systems, where it is used in SRX and MX series routers with SPC3, stems from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause servic...

AlmaLinux 8 : systemd (ALSA-2023:0100)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0100 advisory. - An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy tha...

Adobe InCopy Buffer Overflow RCE

The vulnerability of the Adobe InCopy text creation and editing software relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

Oracle Linux 8 : systemd (ELSA-2023-0100)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-0100 advisory. 239-68.0.2.1 - Backport upstream pstore dmesg fix Orabug: 34850699 - Standardize ioctl BTRFSIOCQGROUPCREATE check and return -ENOTCONN, if quota is not enabled...

XPC CVMServer Privilege Escalation

The vulnerability of the XPC CVMServer service on Mac OS operating systems is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow attackers to increase their privileges...

Graphics Component Unauthorized Access

The vulnerability of the Graphics component in operating systems such as Mac OS, iOS, iPadOS, tvOS, watchOS, and the iCloud for Windows service is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protecte...

systemd: buffer overrun in format_timespan() function

An off-by-one error flaw was found in systemd in the formattimespan function of time-util.c. This flaw allows an attacker to supply specific values for time and accuracy, leading to a buffer overrun in formattimespan, leading to a denial of service...