CVE-2021-3505

A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with 1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate, which is called before the prime number check. The highest threat...

Archlinux libtpms 安全特征问题漏洞

Archlinux libtpms is an Archlinux open source application. A library that provides software emulation of Trusted Platform Modules TPM 1.2 and TPM 2.0. A security feature issue vulnerability exists in versions prior to libtpms 0.8.0, which stems from a bug in the TCG specification where the key...

EulerOS Virtualization 3.0.2.6 : tboot (EulerOS-SA-2021-1452)

According to the version of the tboot package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Certain function pointers in Trusted Boot tboot through 1.9.6 are not validated and can cause arbitrary code execution, which allows...

EulerOS Virtualization 3.0.6.6 : tboot (EulerOS-SA-2021-1521)

According to the version of the tboot package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Certain function pointers in Trusted Boot tboot through 1.9.6 are not validated and can cause arbitrary code execution, which allows...

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

Huawei EulerOS: Security Advisory for tboot (EulerOS-SA-2021-1236)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : tpm2-tss (EulerOS-SA-2021-1259)

According to the version of the tpm2-tss package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 system APIs. It sits between TPM driver and applications, providing TPM2.0...

OESA-2021-1016 tpm2-tss security update

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 system APIs which provides TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers.\r\n\r\n Security Fixes:\r\n\r\n No description is available for this CVE.CVE-2020-24455\r\n\r\n...

EulerOS 2.0 SP5 : tboot (EulerOS-SA-2021-1236)

According to the version of the tboot package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Certain function pointers in Trusted Boot tboot through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to...

The vulnerability of the device driver for the trusted platform module (TPM) of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the device driver for the trusted platform module TPM of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

CVE-2021-1656

TPM Device Driver Information Disclosure Vulnerability...

CVE-2021-1656

TPM Device Driver Information Disclosure Vulnerability...

PT-2021-1599 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the TPM device driver of the Windows operating system. This can allow an attacker to gain unauthorized access to protected...

Microsoft Windows TPM 设备驱动程序信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. The Microsoft Windows/Windows Server TPM device driver is vulnerable to...

CVE-2020-26933

Trusted Computing Group TCG Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USEDAUSED. Improper initialization of this shut-down may result in susceptibility to a dictionary atta...

Trusted Computing Group Trusted Platform Module Security Vulnerability

Trusted Computing Group Trusted Platform Module TPM is a chip that is planted inside a computer to provide a trusted root for the computer, organized by the Trusted Computing Group. The chip was developed by the Trusted Computing Group TCG to effectively protect PCs from unauthorized access. A...

PT-2020-16558

Name of the Vulnerable Software and Affected Versions Trusted Computing Group TCG Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 Description The issue is related to Incorrect Access Control during a non-orderly TPM shut-down that uses USE DA USED...

CVE-2020-26933: Improper Initialization

Trusted Computing Group TCG Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USEDAUSED. Improper initialization of this shut-down may result in susceptibility to a dictionary atta...

Meet the Microsoft Pluton processor – The security chip designed for the future of Windows PCs

The role of the Windows PC and trust in technology are more important than ever as our devices keep us connected and productive across work and life. Windows 10 is the most secure version of Windows ever, built with end-to-end security for protection from the edge to the cloud all the way down to...

CVE-2020-12926

The Trusted Platform Modules TPM reference software may not properly track the number of times a failed shutdown happens. This can leave the TPM in a state where confidential key material in the TPM may be able to be compromised. AMD believes that the attack requires physical access of the device...