CVE-2021-3505

A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with 1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate, which is called before the prime number check. The highest threat...

Archlinux libtpms 安全特征问题漏洞

Archlinux libtpms is an Archlinux open source application. A library that provides software emulation of Trusted Platform Modules TPM 1.2 and TPM 2.0. A security feature issue vulnerability exists in versions prior to libtpms 0.8.0, which stems from a bug in the TCG specification where the key...

CVE-2021-3505

A flaw was found in libtpms. The TPM 2 implementation returns 2048 bit keys with 1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate, which is called before the prime number check. The highest threat from this vulnerability ...

CVE-2021-3446

A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the calle...

DEBIAN-CVE-2021-3446

A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the calle...

CVE-2021-3446

A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the calle...

Design/Logic Flaw

A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the calle...

CVE-2021-3446

A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the calle...

UBUNTU-CVE-2021-3446

A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the calle...

CVE-2021-3446

A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the calle...

CVE-2021-3446

CVE-2021-3446 affects libtpms prior to 0.8.2, where the OpenSSL integration erroneously returns the initial IV instead of the last IV for certain symmetric ciphers, weakening confidentiality. Affected packages have been addressed in downstream advisories (e.g., Mageia MGASA-2021-0590; OSV entries...

CVE-2021-3446

A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the calle...

PT-2021-20531 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: libtpms versions prior to 0.8.2 Description: A flaw in libtpms, specifically in its integration with OpenSSL, relates to the handling of the initialization vector IV when using certain symmetric ciphers. The issue causes the return of the...

Arch Linux libtpms 安全特征问题漏洞

Arch Linux libtpms is a US Arch Linux open source application. A library that provides software emulation of Trusted Platform Modules TPM 1.2 and TPM 2.0. Arch Linux libtpms 0.8.2 suffers from a security signature issue vulnerability that stems from not returning the last initialization vector, b...

Fedora: Security Advisory for libtpms (FEDORA-2021-8b584e5ebb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: libtpms-0.8.2-0.20210301git729fc6a4ca.fc34.1

A library providing TPM functionality for VMs. Targeted for integration into Qemu...

CVE-2021-3446

A flaw was found in libtpms. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the...

[SECURITY] Fedora 33 Update: libtpms-0.7.7-0.20210302gitfd5bd3fb1d.fc33

A library providing TPM functionality for VMs. Targeted for integration into Qemu...

[SECURITY] Fedora 32 Update: libtpms-0.7.7-0.20210302gitfd5bd3fb1d.fc32

A library providing TPM functionality for VMs. Targeted for integration into Qemu...

Fedora 33 : libtpms (2021-caf9e04ef1)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-caf9e04ef1 advisory. - tpm2: CryptSym: fix AES output IV; a CVE has been filed for this issue FEDORA-2021-caf9e04ef1 Note that Nessus has not tested for this issue but has instea...