Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cr8w-xxqw-fm2m

Опубликовано: 28 фев. 2023
Источник: github
Github: Не прошло ревью

Описание

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

EPSS

Процентиль: 49%
0.00257
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 2 лет назад

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVSS3: 5.5
redhat
больше 2 лет назад

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVSS3: 5.5
nvd
больше 2 лет назад

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVSS3: 8.8
msrc
больше 2 лет назад

CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability

CVSS3: 5.5
debian
больше 2 лет назад

An out-of-bounds read vulnerability exists in TPM2.0's Module Library ...

EPSS

Процентиль: 49%
0.00257
Низкий