Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3623

Опубликовано: 02 мар. 2022
Источник: nvd
CVSS3: 6.1
CVSS2: 3.6
EPSS Низкий

Описание

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libtpms_project:libtpms:*:*:*:*:*:*:*:*
Версия до 0.6.5 (исключая)
cpe:2.3:a:libtpms_project:libtpms:*:*:*:*:*:*:*:*
Версия от 0.7.0 (включая) до 0.7.8 (исключая)
cpe:2.3:a:libtpms_project:libtpms:*:*:*:*:*:*:*:*
Версия от 0.8.0 (включая) до 0.8.4 (исключая)
Конфигурация 2
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*
Конфигурация 3
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

EPSS

Процентиль: 5%
0.00025
Низкий

6.1 Medium

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-787
CWE-787

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 3 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

CVSS3: 6.1
redhat
около 4 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

CVSS3: 6.1
debian
больше 3 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-cr ...

suse-cvrf
больше 2 лет назад

Security update for libtpms

CVSS3: 8.2
github
больше 3 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

EPSS

Процентиль: 5%
0.00025
Низкий

6.1 Medium

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-787
CWE-787