The vulnerabilities of the functions Tss2_RC_Decode and Tss2_RC_SetHandler in the TCG TPM2 TPM2 Software Stack allow a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Tss2RCDecode and Tss2RCSetHandler functions in the TCG TPM2 TPM2 Software Stack implementation is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity,...

kernel: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak

In the Linux kernel, the following vulnerability has been resolved: tpm: tpmcrb: Add the missed acpiputtable to fix memory leak In crbacpiadd, we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, shou...

kernel: char: tpm: Protect tpm_pm_suspend with locks

In the Linux kernel, the following vulnerability has been resolved: char: tpm: Protect tpmpmsuspend with locks Currently tpm transactions are executed unconditionally in tpmpmsuspend function, which may lead to races with other tpm accessors in the system. Specifically, the hwrandom tpm driver...

ALSA-2023:6685 Low: tpm2-tss security and enhancement update

The tpm2-tss packages provide the Intel implementation of the Trusted Platform Module TPM 2.0 System API library. This library enables programs to interact with TPM 2.0 devices Security Fixes: tpm2-tss: Buffer Overlow in TSS2RCDecode CVE-2023-22745 For more details about the security issues,...

The vulnerability of the TrEEConfigDriver driver, a framework for creating UEFI patches for InsydeH2O, allows a malicious actor to conceal malicious activities by manipulating TPM PCR values and masking the device with virtual data in the Platform Configuration Register (PCR) registers.

The vulnerability of the TrEEConfigDriver driver, which is used by the InsydeH2O UEFI firmware creation framework, is related to security configuration errors. Exploiting this vulnerability can allow attackers to conceal malicious activities by manipulating TPM PCR values and masking the device...

CVE-2023-36718

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability...

CVE-2023-36717

Windows Virtual Trusted Platform Module Denial of Service Vulnerability...

CVE-2023-36717

Windows Virtual Trusted Platform Module Denial of Service Vulnerability...

CVE-2023-36718

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability...

Denial of service

Windows Virtual Trusted Platform Module Denial of Service Vulnerability...

Remote code execution

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability...

CVE-2023-36718 Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability

...

CVE-2023-36718

CVE-2023-36718: Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability. CVSS 3.1: Attack Vector LOCAL, Attack Complexity HIGH, Privileges Required LOW, User Interaction NONE, Scope CHANGED, with Confidentiality, Integrity, and Availability impacts rated HIGH. Exploitation s...

CVE-2023-36718 Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability

...

CVE-2023-36717

Technical details for CVE-2023-36717 are not publicly available in the provided documents. Monitor for updates from official advisories and vendor notices.

CVE-2023-36717 Windows Virtual Trusted Platform Module Denial of Service Vulnerability

...

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability

...

Microsoft Windows Virtual Trusted Platform Module Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows Virtual Trusted Platform Module. An attacker could exploit the vulnerability to remotely execute code. The...

PT-2023-6060 · Microsoft · Virtual Trusted Platform Module +1

Name of the Vulnerable Software and Affected Versions: Microsoft Virtual Trusted Platform Module affected versions not specified Description: The issue is related to insufficient input validation in the virtual trusted platform module of Windows operating systems. This can be exploited by attacke...

Duplicate Advisory: EVE Freely Allocates Buffer on The Stack With Data From Socket

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-phcg-h58r-gmcq. This link is maintained to preserve external references. Original Description As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing...