TencentOS Server 3: libtpms (TSSA-2022:0274)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0274 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2021-3746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2...

RHEL 8 : 8.2_libtpms (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libtpms: out-of-bounds access via specially crafted TPM 2 command packets CVE-2021-3746 - A stack...

RHEL 8 : libtpms (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libtpms: out-of-bounds access when trying to resume the state of the vTPM CVE-2021-3623 - A flaw was foun...

CentOS 9 : libtpms-0.9.1-2.20211126git1ff6fe1f43.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libtpms-0.9.1-2.20211126git1ff6fe1f43.el9 build changelog. - out-of-bounds access when trying to resume the state of the vTPM CVE-2021-3623 - out-of-bounds access via specially...

Security Bulletin: This Power System update is being released to address CVE-2021-3746

Summary A security problem for CVE-2021-3746 has been resolved which affects any VM configured with a virtual trusted platform module vTPM version 2. Vulnerability Details CVEID:CVE-2021-3746 DESCRIPTION: libtpms is vulnerable to a denial of service, caused by an out-of-bounds access flaw. By...

Mageia: Security Advisory (MGASA-2021-0590)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libtpms/swtpm packages fix security vulnerability

CryptSym: fix AES output IV CVE-2021-3505. Fixed a context save and suspend/resume problem when public keys are loaded. Reset too large size indicators in TPM2B to avoid access beyond buffer CVE-2021-3623 Restore original value in buffer if unmarshalled one was illegal Fixed out-of-bounds access...

CVE-2021-3746

CVE-2021-3746 : libtpms suffers out-of-bounds access when handling TPM2 packets, triggered by crafted TPM2 commands and writes to volatile state, with the highest impact to availability. Affected are libtpms versions before 0.8.5, before 0.7.9, and before 0.6.6. Public advisories indicate a fix i...

SUSE-SU-2021:3004-2 Security update for libtpms

This update for libtpms fixes the following issues: - CVE-2021-3746: Fixed out-of-bounds access via specially crafted TPM 2 command packets bsc1189935...

SUSE SLES15 Security Update : libtpms (SUSE-SU-2021:3004-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:3004-1 advisory. - CVE-2021-3746: Fixed out-of-bounds access via specially crafted TPM 2 command packets bsc1189935. Tenable has extracted the preceding description blo...

SUSE: Security Advisory (SUSE-SU-2021:3004-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : libtpms (openSUSE-SU-2021:3004-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3004-1 advisory. - A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by...

OPENSUSE-SU-2021:3004-1 Security update for libtpms

This update for libtpms fixes the following issues: - CVE-2021-3746: Fixed out-of-bounds access via specially crafted TPM 2 command packets bsc1189935...

SUSE-SU-2021:3004-1 Security update for libtpms

This update for libtpms fixes the following issues: - CVE-2021-3746: Fixed out-of-bounds access via specially crafted TPM 2 command packets bsc1189935...