openSUSE: Security Advisory for tpm2-tss-engine (openSUSE-SU-2021:0542-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.0 : tpm2-tss (EulerOS-SA-2021-1752)

According to the version of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privileg...

EulerOS Virtualization 2.9.1 : tpm2-tss (EulerOS-SA-2021-1727)

According to the version of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privileg...

Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2021-1727)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2021-1752)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : tpm2-tss-engine (openSUSE-2021-542)

This update for tpm2-tss-engine fixes the following issues : - Added support to disable fixed compilation flags - Added --disable-defaultflags during compilation to avoid breakage of our gcc-PIE profile resulted in non-position-independent executable tpm2-tss-genkey, bsc1183895 This update was...

Security update for tpm2-tss-engine (moderate)

openSUSE Security Update: Security update for tpm2-tss-engine Announcement ID: openSUSE-SU-2021:0542-1 Rating: moderate References: 1183895 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for tpm2-tss-engine fixes the...

OPENSUSE-SU-2021:0542-1 Security update for tpm2-tss-engine

This update for tpm2-tss-engine fixes the following issues: - Added support to disable fixed compilation flags - Added --disable-defaultflags during compilation to avoid breakage of our gcc-PIE profile resulted in non-position-independent executable tpm2-tss-genkey, bsc1183895 This update was...

PT-2021-27339

Name of the Vulnerable Software and Affected Versions: tpm2-tss-engine affected versions not specified Description: The issue with tpm2-tss-engine is related to compilation flags. Specifically, the problem arose because fixed compilation flags resulted in a non-position-independent executable...

SUSE SLED15 / SLES15 Security Update : tpm2-tss-engine (SUSE-SU-2021:1113-1)

This update for tpm2-tss-engine fixes the following issues : Added support to disable fixed compilation flags Added --disable-defaultflags during compilation to avoid breakage of our gcc-PIE profile resulted in non-position-independent executable tpm2-tss-genkey, bsc1183895 Note that Tenable...

SUSE-SU-2021:1113-1 Security update for tpm2-tss-engine

This update for tpm2-tss-engine fixes the following issues: - Added support to disable fixed compilation flags - Added --disable-defaultflags during compilation to avoid breakage of our gcc-PIE profile resulted in non-position-independent executable tpm2-tss-genkey, bsc1183895...

PT-2021-28418

Name of the Vulnerable Software and Affected Versions: tpm2-tss-engine affected versions not specified Description: The issue concerns the compilation of tpm2-tss-engine, where fixed compilation flags were causing problems. Specifically, the use of these flags resulted in a non-position-independe...

Fedora 33 : libtpms (2021-caf9e04ef1)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-caf9e04ef1 advisory. - tpm2: CryptSym: fix AES output IV; a CVE has been filed for this issue FEDORA-2021-caf9e04ef1 Note that Nessus has not tested for this issue but has instea...

tpm2-tss:Tss2_Sys_ACT_SetTimeout_Complete: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6402731238621184 Project: tpm2-tss Fuzzing Engine: libFuzzer Fuzz Target: Tss2SysACTSetTimeoutComplete Job Type: libfuzzerasantpm2-tss Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000003e07df5 Crash State: NULL Sanitizer: address...

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

AZL-6924 CVE-2020-24455 affecting package tpm2-tss for versions less than 2.4.6-1

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

Privilege escalation

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...