6 matches found
MiracleLinux 8 : tpm2-tools-4.1.1-5.el8 (AXSA:2021-2806:03)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2806:03 advisory. tpm2-tools: fixed AES wrapping key in tpm2import CVE-2021-3565 Tenable has extracted the preceding description block directly from the MiracleLinux security...
tpm2-tools: fixed AES wrapping key in tpm2_import
A flaw was found in tpm2-tools. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality...
tpm2-tools security and enhancement update
An update is available for tpm2-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tpm2-tools packages add a set of utilities for management and...
RLSA-2021:4413 Moderate: tpm2-tools security and enhancement update
The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space. Security Fixes: tpm2-tools: fixed AES wrapping key in tpm2import CVE-2021-3565 For more details about the security issues, including the impact, a CVSS score,...
ALSA-2021:4413 Moderate: tpm2-tools security and enhancement update
The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space. Security Fixes: tpm2-tools: fixed AES wrapping key in tpm2import CVE-2021-3565 For more details about the security issues, including the impact, a CVSS score,...
Moderate: tpm2-tools security and enhancement update
The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space. Security Fixes: tpm2-tools: fixed AES wrapping key in tpm2import CVE-2021-3565 For more details about the security issues, including the impact, a CVSS score,...