Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30802
HistoryJun 04, 2021 - 5:08 a.m.

Denial Of Service (DoS)

2021-06-0405:08:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.0004 Low

EPSS

Percentile

12.7%

libtpms.so is vulnerable to denial of service. Decrypting data using RSA causes a SIGBUS (bad memory access) and termination of swtpm in CryptRsaDecrypt() in src/tpm2/crypto/openssl/CryptRsa.c.

CPENameOperatorVersion
libtpms.sole0.7.1
libtpms.sole0.7.1

0.0004 Low

EPSS

Percentile

12.7%