433 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-7524
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
[SECURITY] Fedora 40 Update: clevis-pin-tpm2-0.5.3-9.fc40
Clevis PIN for unlocking with TPM2 supporting Authorized Policies...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: KEYS: Trusted: Fixed a memory leak in tpm2keyencode. The “scratch” buffer is never freed. This issue is addressed by calling kfree in both the success and error cases...
[SECURITY] Fedora 41 Update: clevis-pin-tpm2-0.5.3-9.fc41
Clevis PIN for unlocking with TPM2 supporting Authorized Policies...
Oracle Linux 9 : tpm2-tools (ELSA-2024-9424)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-9424 advisory. - tpm2checkquote: Fix check of magic number. CVE-2024-29038 - tpm2checkquote: Add comparison of pcr selection. CVE-2024-29039 Tenable has extracted the...
tpm2-tools security update
5.2-4 - Backport upstream fixes. - tpm2checkquote: Fix check of magic number. CVE-2024-29038 - tpm2checkquote: Add comparison of pcr selection. CVE-2024-29039 - Fix check of magic number. Resolves: RHEL-23198 Resolves: RHEL-41031 Resolves: RHEL-41035...
RHSA-2024:9424 Red Hat Security Advisory: tpm2-tools security update
Bulletin has no description...
kernel: KEYS: trusted: Fix memory leak in tpm2_key_encode()
in linux kernel, tpm2keyencode has a memory leak due to 'scratch' never being freed. This can lead to denial of service...
Low: Red Hat Security Advisory: tpm2-tools security update
An update for tpm2-tools is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
tpm2-tools: pcr selection value is not compared with the attest
A flaw was found in tpm2-tools. The PCR selection, which is passed with the --pcr parameter, is not compared with the attest, making it possible for an attacker to fake a valid attestation...
RHEL 9 : tpm2-tools (RHSA-2024:9424)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9424 advisory. The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space...
Low: tpm2-tools security update
The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space. Security Fixes: tpm2-tools: arbitrary quote data may go undetected by tpm2checkquote CVE-2024-29038 tpm2-tools: pcr selection value is not compared with the...
ALSA-2024:9424 Low: tpm2-tools security update
The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space. Security Fixes: tpm2-tools: arbitrary quote data may go undetected by tpm2checkquote CVE-2024-29038 tpm2-tools: pcr selection value is not compared with the...
Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2024-2680)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2024-2646)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-49858 efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog boot service is cached in memory, and passed on to the OS...
CBL Mariner 2.0 Security Update: tpm2-tss (CVE-2024-29040)
The version of tpm2-tss installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29040 advisory. - This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS...
CVE-2024-29040 affecting package tpm2-tss for versions less than 2.4.6-4
CVE-2024-29040 affecting package tpm2-tss for versions less than 2.4.6-4. A patched version of the package is available...