Lucene search
+L

433 matches found

OSV
OSV
added 2021/10/19 3:15 p.m.20 views

CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

6.5CVSS6.8AI score
SaveExploits0References1
NVD
NVD
added 2021/10/19 3:15 p.m.18 views

CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

7.1CVSS0.00966EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/19 3:15 p.m.11 views

UBUNTU-CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

6.5CVSS6.9AI score0.00966EPSS
SaveExploits0References2
Prion
Prion
added 2021/10/19 3:15 p.m.17 views

Design/Logic Flaw

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

7.1CVSS6.5AI score0.00966EPSS
SaveExploits0References1Affected Software3
Debian CVE
Debian CVE
added 2021/10/19 2:7 p.m.32 views

CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

7.1CVSS6.8AI score0.00966EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.11 views

The vulnerability of the repository for Trusted Platform Module tpm2-tools, related to the disclosure of information, allows a perpetrator to gain access to confidential data.

The vulnerability of the repository for Trusted Platform Module tpm2-tools is related to the use of a fixed AES key for internal encryption. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to confidential data...

5.9CVSS6.5AI score0.01327EPSS
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/09/10 12:0 a.m.35 views

SUSE SLES15 Security Update : libtpms (SUSE-SU-2021:3004-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:3004-1 advisory. - CVE-2021-3746: Fixed out-of-bounds access via specially crafted TPM 2 command packets bsc1189935. Tenable has extracted the preceding description blo...

7.1CVSS6.9AI score0.00966EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/09/10 12:0 a.m.29 views

openSUSE 15 Security Update : libtpms (openSUSE-SU-2021:3004-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3004-1 advisory. - A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by...

7.1CVSS6.8AI score0.00966EPSS
SaveExploits0References4
CBLMariner
CBLMariner
added 2021/09/09 3:2 p.m.31 views

CVE-2020-24455 affecting package tpm2-tss 2.4.0-1

CVE-2020-24455 affecting package tpm2-tss 2.4.0-1. An upgraded version of the package is available that resolves this issue...

6.7CVSS7.4AI score0.00584EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2021/08/27 6:3 p.m.29 views

CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

7.1CVSS2.8AI score0.00966EPSS
SaveExploits0References3
OSV
OSV
added 2021/07/16 8:25 a.m.14 views

MGASA-2021-0353 Updated tpm2-tools package fixes security vulnerability

A flaw was found in tpm2-tools. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality CVE-2021-3565...

5.9CVSS5.4AI score0.01327EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/07/16 8:25 a.m.41 views

Updated tpm2-tools package fixes security vulnerability

A flaw was found in tpm2-tools. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality CVE-2021-3565...

5.9CVSS2.5AI score0.01327EPSS
SaveExploits0References2
CBLMariner
CBLMariner
added 2021/07/08 9:56 p.m.17 views

CVE-2021-3565 affecting package tpm2-tools 4.2-2

CVE-2021-3565 affecting package tpm2-tools 4.2-2. A patched version of the package is available...

5.9CVSS7.5AI score0.01327EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2021/07/07 12:0 a.m.46 views

TCG TPM2 Software Stack: Information disclosure

Background TCG TPM2 Software Stack is a library to interface with trusted platform modules. Description TCG TPM2 Software Stack did not appropriately apply FAPI policies to protect data encrypted with the trusted platform module. Impact Data encrypted using TCG TPM2 Software Stack tpm2-tss may no...

6.7CVSS3.3AI score0.00584EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/07/07 12:0 a.m.28 views

Photon OS 3.0: Tpm2 PHSA-2021-3.0-0263

An update of the tpm2 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0263. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

5.9CVSS6.1AI score0.01327EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/07/06 12:0 a.m.18 views

Fedora: Security Advisory for tpm2-tools (FEDORA-2021-c970c02748)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.9CVSS5.8AI score0.01327EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/07/06 12:0 a.m.18 views

Fedora: Security Advisory for tpm2-tools (FEDORA-2021-00a15ad850)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.9CVSS5.8AI score0.01327EPSS
SaveExploits0References2
Photon
Photon
added 2021/07/02 12:0 a.m.46 views

Moderate Photon OS Security Update - PHSA-2021-3.0-0263

Updates of 'tpm2-tools', 'bluez' packages of Photon OS have been released...

5.5AI score
SaveExploits0
Photon
Photon
added 2021/07/02 12:0 a.m.55 views

Moderate Photon OS Security Update - PHSA-2021-0263

Updates of 'bluez', 'tpm2-tools' packages of Photon OS have been released...

4.3CVSS2.1AI score0.05714EPSS
SaveExploits6
Fedora
Fedora
added 2021/06/30 3:33 a.m.35 views

[SECURITY] Fedora 33 Update: tpm2-tools-4.3.2-1.fc33

tpm2-tools is a batch of tools for tpm2.0. It is based on tpm2-tss...

5.9CVSS1.3AI score0.01327EPSS
SaveExploits0
Rows per page
Query Builder