447 matches found
kernel: KEYS: trusted: Fix memory leak in tpm2_key_encode()
in linux kernel, tpm2keyencode has a memory leak due to 'scratch' never being freed. This can lead to denial of service...
Low: Red Hat Security Advisory: tpm2-tools security update
An update for tpm2-tools is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
tpm2-tools: pcr selection value is not compared with the attest
A flaw was found in tpm2-tools. The PCR selection, which is passed with the --pcr parameter, is not compared with the attest, making it possible for an attacker to fake a valid attestation...
Low: tpm2-tools security update
The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space. Security Fixes: tpm2-tools: arbitrary quote data may go undetected by tpm2checkquote CVE-2024-29038 tpm2-tools: pcr selection value is not compared with the...
RHEL 9 : tpm2-tools (RHSA-2024:9424)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9424 advisory. The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space...
ALSA-2024:9424 Low: tpm2-tools security update
The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space. Security Fixes: tpm2-tools: arbitrary quote data may go undetected by tpm2checkquote CVE-2024-29038 tpm2-tools: pcr selection value is not compared with the...
Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2024-2680)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2024-2646)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-49858 efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog boot service is cached in memory, and passed on to the OS...
CBL Mariner 2.0 Security Update: tpm2-tss (CVE-2024-29040)
The version of tpm2-tss installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29040 advisory. - This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS...
CVE-2024-29040 affecting package tpm2-tss for versions less than 2.4.6-4
CVE-2024-29040 affecting package tpm2-tss for versions less than 2.4.6-4. A patched version of the package is available...
RHSA-2024:4739 Red Hat Security Advisory: tpm2-tss security update
Bulletin has no description...
RHSA-2024:4408 Red Hat Security Advisory: tpm2-tss security update
Bulletin has no description...
RHSA-2023:7166 Red Hat Security Advisory: tpm2-tss security and enhancement update
Bulletin has no description...
RHSA-2023:6685 Red Hat Security Advisory: tpm2-tss security and enhancement update
Bulletin has no description...
RHSA-2021:4413 Red Hat Security Advisory: tpm2-tools security and enhancement update
Bulletin has no description...
Security Bulletin: Vulnerability in tpm2-tss library (CVE-2023-22745) affects Power HMC.
Summary The tpm2-tss library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-22745 DESCRIPTION: tpm2-tss is vulnerable to a buffer overflow, caused by improper bounds checking by the Tss2RCSetHandler and Tss2RCDecode...
Fedora: Security Advisory (FEDORA-2023-d88521bfc5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NewStart CGSL MAIN 6.02 : tpm2-tools Vulnerability (NS-SA-2024-0065)
The remote NewStart CGSL host, running version MAIN 6.02, has tpm2-tools packages installed that are affected by a vulnerability: - A flaw was found in tpm2-tools. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal th...
Fedora: Security Advisory (FEDORA-2023-af8489dc5b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...