Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-3623

Опубликовано: 02 мар. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 3.6
CVSS3: 6.1

Описание

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

РелизСтатусПримечание
bionic

DNE

devel

not-affected

0.9.3-0ubuntu1
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

ignored

end of life
hirsute

ignored

end of life
impish

ignored

end of life
jammy

not-affected

0.9.3-0ubuntu1
trusty

ignored

end of standard support

Показывать по

EPSS

Процентиль: 5%
0.00025
Низкий

3.6 Low

CVSS2

6.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.1
redhat
около 4 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

CVSS3: 6.1
nvd
больше 3 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

CVSS3: 6.1
debian
больше 3 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-cr ...

suse-cvrf
больше 2 лет назад

Security update for libtpms

CVSS3: 8.2
github
больше 3 лет назад

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

EPSS

Процентиль: 5%
0.00025
Низкий

3.6 Low

CVSS2

6.1 Medium

CVSS3