496 matches found
CVE-2021-3565
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentialit...
UBUNTU-CVE-2021-3565
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentialit...
CVE-2021-3565
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentialit...
CVE-2021-3565
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentialit...
CVE-2021-3565
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentialit...
CVE-2021-3565
CVE-2021-3565 affects tpm2-tools prior to 5.1.1 and 4.3.2, where tpm2_import used a fixed AES key for the inner wrapper. This could allow a MITM attacker to unwrap the inner portion and reveal the key being imported, impacting data confidentiality. Mitigation reported in multiple advisories: upgr...
CVE-2021-3565: Improper Initialization
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentialit...
Information Disclosure
tpm2-tools is vulnerable to information disclosure. The vulnerability exists due to a flaw was found in tpm2-tools which uses a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported...
Fedora: Security Advisory for tpm2-tss (FEDORA-2021-fa78f3ca9f)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2021-4260
Name of the Vulnerable Software and Affected Versions tpm2-tools versions prior to 5.1.1 tpm2-tools versions prior to 4.3.2 Description The issue is related to the use of a fixed AES key for internal wrapping in tpm2-tools, which could allow a remote attacker to access confidential data...
CVE-2021-3565
A flaw was found in tpm2-tools. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality...
tpm2-tools 信任管理问题漏洞
tpm2-tools is a source code library. A trust management issue vulnerability exists in the tpm2-tools package, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information abou...
[SECURITY] Fedora 34 Update: tpm2-tss-3.1.0-1.fc34
tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...
tpm2-tools bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
tpm2-tools bug fix and enhancement update
An update is available for tpm2-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
tpm2-tss bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
tpm2-tss bug fix and enhancement update
An update is available for tpm2-tss. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...
tpm2-abrmd bug fix and enhancement update
An update is available for tpm2-abrmd, tpm2-abrmd-selinux. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, s...