ALT-PU-2023-1933: package libtpms update to version 0.9.6-alt1
Источник
errata.altlinux.org
Дата публикации
02.06.2023
Дата обновления
02.06.2023
Устраненные уязвимости
4
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container
Описание
This update upgrades libtpms to version 0.9.6-alt1.
Устраненные уязвимости4
Связанные уязвимости
CVSS3: 7.8
altlinux
больше 3 лет назад
ALT-PU-2023-1896: package `libtpms` update to version 0.9.6-alt1
CVSS3: 7.8
ubuntu
больше 3 лет назад
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.