The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtpms | May 15, 2023 | Feb 28, 2023 |
| Centos_linux | — | Upgrade libtpmsUpgrade libtpms-debuginfoUpgrade libtpms-debugsource | May 15, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade libtpms | Jul 30, 2024 | Feb 28, 2023 |
| Msft | — | 2023-03 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5023702)2023-03 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5023697)2023-03 Cumulative Update for Microsoft Windows 10, version 21H2 (KB5023696)2023-03 Cumulative Update for Microsoft Windows 10, version 1607 (KB5023697)2023-03 Cumulative Update for Microsoft Windows 11, version 22H2 (KB5023706)2023-03 Cumulative Update for Microsoft Windows 10, version 1809 (KB5023702)2023-03 Cumulative Update for Microsoft Windows 10, version 22H2 (KB5023696)2023-03 Cumulative Update for Microsoft Windows 10, version 1507 (KB5023713)2023-03 Cumulative Update for Microsoft Windows 11, version 21H2 (KB5023698)2023-03 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5023705)2023-03 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5023705) | Mar 14, 2023 | Mar 14, 2023 |
| Oracle_linux | — | Upgrade libtpms | May 17, 2023 | Feb 28, 2023 |
| Redhat_linux | — | Upgrade libvirt-dbusUpgrade qemu-kvm-block-rbdUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-basic-pluginsUpgrade sgabios-binUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libnbd-develUpgrade libiscsi-debugsourceUpgrade libvirt-develUpgrade libguestfs-toolsUpgrade libguestfs-develUpgrade nbdkit-python-pluginUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-imgUpgrade nbdkit-example-pluginsUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libtpms-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade superminUpgrade nbdkit-curl-pluginUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-tar-filterUpgrade qemu-kvm-commonUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade perl-Sys-Guestfs-debuginfoUpgrade supermin-debugsourceUpgrade libguestfs-javadocUpgrade qemu-kvm-hw-usbredir-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkitUpgrade libguestfs-javaUpgrade ocaml-libguestfs-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-docsUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-debuginfoUpgrade sgabiosUpgrade libguestfs-java-debuginfoUpgrade ocaml-libguestfs-develUpgrade nbdfuse-debuginfoUpgrade libnbd-bash-completionUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-libsUpgrade python3-hivexUpgrade swtpmUpgrade hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-xfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-ui-openglUpgrade virt-v2v-debuginfoUpgrade nbdkit-curl-plugin-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-wiresharkUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-ssh-pluginUpgrade swtpm-develUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-python-plugin-debuginfoUpgrade ocaml-hivex-debuginfoUpgrade qemu-kvm-ui-spiceUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-gzip-plugin-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-serverUpgrade nbdkit-server-debuginfoUpgrade seavgabios-binUpgrade virt-v2v-debugsourceUpgrade libguestfs-rsyncUpgrade libguestfs-debugsourceUpgrade libguestfs-rescueUpgrade virt-v2v-bash-completionUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-python-debugsourceUpgrade netcf-debugsourceUpgrade libguestfs-gfs2Upgrade ocaml-hivex-develUpgrade nbdkit-vddk-plugin-debuginfoUpgrade nbdkit-vddk-pluginUpgrade libvirt-daemon-config-networkUpgrade libvirt-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade virt-v2v-man-pages-ukUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-iscsi-direct-debuginfoUpgrade libvirt-wireshark-debuginfoUpgrade ruby-hivexUpgrade libvirt-daemonUpgrade qemu-kvm-block-sshUpgrade virt-v2v-man-pages-jaUpgrade virt-v2vUpgrade netcf-develUpgrade nbdkit-linuxdisk-plugin-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-docsUpgrade SLOFUpgrade ocaml-libnbd-debuginfoUpgrade libvirt-clientUpgrade libtpms-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade nbdfuseUpgrade libguestfs-gobject-develUpgrade libtpmsUpgrade ocaml-libguestfsUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-lock-sanlockUpgrade lua-guestfs-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade python3-libguestfsUpgrade libvirt-nss-debuginfoUpgrade swtpm-libs-debuginfoUpgrade nbdkit-gzip-pluginUpgrade hivex-debugsourceUpgrade qemu-kvm-hw-usbredirUpgrade libvirt-daemon-kvmUpgrade libnbd-debuginfoUpgrade nbdkit-basic-filters-debuginfoUpgrade swtpm-tools-pkcs11Upgrade libiscsiUpgrade libguestfs-man-pages-ukUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-img-debuginfoUpgrade netcfUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-tmpdisk-plugin-debuginfoUpgrade libguestfsUpgrade ocaml-hivexUpgrade qemu-guest-agent-debuginfoUpgrade ocaml-libnbdUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvmUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-diskUpgrade supermin-debuginfoUpgrade nbdkit-debugsourceUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade python3-libnbdUpgrade swtpm-debugsourceUpgrade ruby-hivex-debuginfoUpgrade nbdkit-tar-pluginUpgrade libnbd-debugsourceUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-linuxdisk-pluginUpgrade libguestfs-applianceUpgrade libguestfs-inspect-iconsUpgrade nbdkit-gzip-filterUpgrade virt-dib-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade python3-libnbd-debuginfoUpgrade libvirt-debugsourceUpgrade nbdkit-tar-plugin-debuginfoUpgrade qemu-kvm-block-glusterUpgrade nbdkit-gzip-filter-debuginfoUpgrade netcf-libsUpgrade netcf-libs-debuginfoUpgrade python3-libvirtUpgrade nbdkit-ssh-plugin-debuginfoUpgrade libguestfs-gobjectUpgrade seabios-binUpgrade libvirtUpgrade seabiosUpgrade qemu-kvm-block-iscsi-debuginfoNo solution existsUpgrade nbdkit-xz-filterUpgrade nbdkit-nbd-plugin-debuginfoUpgrade swtpm-debuginfoUpgrade perl-hivex-debuginfoUpgrade nbdkit-basic-filtersUpgrade swtpm-tools-debuginfoUpgrade ocaml-libnbd-develUpgrade hivex-develUpgrade lua-guestfsUpgrade qemu-kvm-testsUpgrade qemu-kvm-ui-spice-debuginfoUpgrade nbdkit-develUpgrade libtpms-develUpgrade swtpm-toolsUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-tar-filter-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libnbdUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade swtpm-libsUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-curl-debuginfoUpgrade perl-Sys-GuestfsUpgrade ruby-libguestfsUpgrade python3-libvirt-debuginfoUpgrade qemu-guest-agentUpgrade nbdkit-xz-filter-debuginfoUpgrade libvirt-nss | Apr 19, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade libtpms-develUpgrade libtpms0 | Apr 28, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade libtpms0 | Mar 22, 2023 | Feb 28, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub