Описание
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.
An out-of-bound read vulnerability was found in the TPM 2.0's Module Library, which allows the reading of 2-byte data after the end of the TPM command. This flaw allows an attacker to leak confidential data stored within the libtpms context.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:8.2/libtpms | Will not fix | ||
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:8.3/libtpms | Will not fix | ||
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:av/libtpms | Affected | ||
| Red Hat Enterprise Linux 8 | virt-devel | Fixed | RHSA-2023:2757 | 16.05.2023 |
| Red Hat Enterprise Linux 8 | virt | Fixed | RHSA-2023:2757 | 16.05.2023 |
| Red Hat Enterprise Linux 8.6 Extended Update Support | virt-devel | Fixed | RHSA-2023:1833 | 18.04.2023 |
| Red Hat Enterprise Linux 8.6 Extended Update Support | virt | Fixed | RHSA-2023:1833 | 18.04.2023 |
| Red Hat Enterprise Linux 9 | libtpms | Fixed | RHSA-2023:2453 | 09.05.2023 |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.
CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability
An out-of-bounds read vulnerability exists in TPM2.0's Module Library ...
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.
EPSS
5.5 Medium
CVSS3