433 matches found
Fedora: Security Advisory for tpm2-tss (FEDORA-2020-1d3fcce2a3)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
tpm2:tpm2_execute_command_fuzzer: Index-out-of-bounds in MemoryRemoveTrailingZeros
Detailed Report: https://oss-fuzz.com/testcase?key=5767381644476416 Project: tpm2 Fuzzing Engine: libFuzzer Fuzz Target: tpm2executecommandfuzzer Job Type: libfuzzerubsantpm2 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: MemoryRemoveTrailingZeros CheckPWAuthSessio...
edk2 security, bug fix, and enhancement update
20190308git89910a39dcfd-6.el8 - edk2-ArmVirtPkg-silence-DEBUGVERBOSE-masking-0x00400000-.patch bz1714446 - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch bz1714446 - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch bz1714446 - Resolves: bz1714446 edk2-aarch64 silen...
openSUSE Security Update : the Linux Kernel (openSUSE-2018-377)
The openSUSE Leap 42.3 kernel was updated to 4.4.126 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-1091: In the flushtmregstothread function in arch/powerpc/kernel/ptrace.c, a guest kernel crash can be triggered from unprivileged userspace during a...
tpm2/tpm2_execute_command_fuzzer: Index-out-of-bounds in MemoryRemoveTrailingZeros
Project: https://chromium.googlesource.com/chromiumos/thirdparty/tpm2 Detailed report: https://oss-fuzz.com/testcase?key=6246632883486720 Project: tpm2 Fuzzer: libFuzzertpm2executecommandfuzzer Fuzz target binary: tpm2executecommandfuzzer Job Type: libfuzzerubsantpm2 Platform Id: linux Crash Type...
CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
Design/Logic Flaw
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
CVE-2017-7524
CVE-2017-7524 affects tpm2-tools before 1.1.1, where a password is transmitted in plaintext from client to server when generating an HMAC, enabling a potential password leak. Publicly documented details across connected sources confirm the affected component and root cause, with several advisorie...
tpm2: g_forceFailureMode
Project: https://chromium.googlesource.com/chromiumos/thirdparty/tpm2 Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6356831496568832 Fuzzer: libFuzzertpm2executecommandfuzzer Job Type: libfuzzerasantpm2 Platform Id: linux Crash Type: ASSERT Crash Address: Crash State:...