CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

Privilege escalation

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

CVE-2020-24455

CVE-2020-24455 affects the TPM2 software stack (tpm2-tss) versions older than 3.0.1 and older than 2.4.3. The vulnerability is caused by missing initialization of a variable in the TPM2 source, which may allow a privileged user to escalate privileges via local access. Remediation per connected do...

tpm2-tss Security Vulnerabilities

Peter Huewe tpm2-tss is a Peter Huewe open source application. Source code for the implementation of the Trusted Computing Group TCG TPM2 Software Stack TSS. A security vulnerability exists in tpm2-tss before 3.0.1 and before 2.4.3, which stems from a missing initialization of variables, allowing...

Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2021-1259)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : tpm2-tss (EulerOS-SA-2021-1259)

According to the version of the tpm2-tss package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 system APIs. It sits between TPM driver and applications, providing TPM2.0...

Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2021-1278)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : tpm2-tss (EulerOS-SA-2021-1278)

According to the version of the tpm2-tss package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - FAPI PolicyPCR not instatiating correctly.CVE-2020-24455 Note that Tenable Network Security has extracted the preceding description block directly...

CVE-2020-24455

The tpm2-tss package introduced an implementation of TCG Feature API FAPI from v2.4.0. While instantiating TPM policy via FAPI, TPM's Platform Configuration Register PCR are used to compute policy digest. While reading PCR values via 'ifapireadpcr' routine, a PCR list counter was not set which ca...

Updated tpm2-tss packages fix a security vulnerability

FAPI PolicyPCR not instatiating correctly CVE-2020-24455. Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that omits PCR checks. All such objects have to be recreated. The tpm2-tss package has been...

MGASA-2020-0417 Updated tpm2-tss packages fix a security vulnerability

FAPI PolicyPCR not instatiating correctly CVE-2020-24455. Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that omits PCR checks. All such objects have to be recreated. The tpm2-tss package has been...

tpm2-tools bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

tpm2-tss bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Fedora 33 : tpm2-tss (2020-1d3fcce2a3)

tpm2-tss 3.0.1 changed or fixed : Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be...

Fedora 32 : tpm2-tss (2020-bb8e3c5548)

tpm2-tss 2.4.3 changed or fixed : Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be...

Fedora: Security Advisory for tpm2-tss (FEDORA-2020-bb8e3c5548)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: tpm2-tss-2.4.3-1.fc32

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...

[SECURITY] Fedora 33 Update: tpm2-tss-3.0.1-1.fc33

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...