3 matches found
CVE-2021-3505
A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with 1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate, which is called before the prime number check. The highest threat...
6.8CVSS0.00404EPSS
SaveExploits1References7
CVE-2021-3505
CVE-2021-3505 affects libtpms
5.5CVSS5.2AI score0.00404EPSS
SaveExploits1References3Affected Software1
PT-2021-20813
Name of the Vulnerable Software and Affected Versions: libtpms versions prior to 0.8.0 Description: A flaw was found in the TPM 2 implementation of libtpms, where it returns 2048 bit keys with approximately 1984 bit strength due to a bug in the TCG specification. The issue lies in the key creatio...
5.5CVSS0.00404EPSS
SaveExploits1References20
20