Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6527-9qhc-39j4

Опубликовано: 04 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

EPSS

Процентиль: 5%
0.00025
Низкий

8.2 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 3 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

CVSS3: 6.1
redhat
около 4 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

CVSS3: 6.1
nvd
больше 3 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

CVSS3: 6.1
debian
больше 3 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-cr ...

suse-cvrf
больше 2 лет назад

Security update for libtpms

EPSS

Процентиль: 5%
0.00025
Низкий

8.2 High

CVSS3

Дефекты

CWE-787