An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtpms | May 15, 2023 | Feb 28, 2023 |
| Centos_linux | — | Upgrade libtpmsUpgrade libtpms-debugsourceUpgrade libtpms-debuginfo | May 15, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade libtpms | Jul 30, 2024 | Feb 28, 2023 |
| Msft | — | 2023-03 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5023702)2023-03 Cumulative Update for Microsoft Windows 11, version 22H2 (KB5023706)2023-03 Cumulative Update for Microsoft Windows 10, version 1607 (KB5023697)2023-03 Cumulative Update for Microsoft Windows 10, version 21H2 (KB5023696)2023-03 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5023697)2023-03 Cumulative Update for Microsoft Windows 10, version 1809 (KB5023702)2023-03 Cumulative Update for Microsoft Windows 10, version 1507 (KB5023713)2023-03 Cumulative Update for Microsoft Windows 11, version 21H2 (KB5023698)2023-03 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5023705)2023-03 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5023705)2023-03 Cumulative Update for Microsoft Windows 10, version 22H2 (KB5023696) | Mar 14, 2023 | Mar 14, 2023 |
| Oracle_linux | — | Upgrade libtpms | May 17, 2023 | Feb 28, 2023 |
| Redhat_linux | — | Upgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-qemuUpgrade ocaml-hivexUpgrade python3-hivex-debuginfoUpgrade netcf-libsUpgrade netcfUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-client-debuginfoUpgrade nbdkit-nbd-plugin-debuginfoUpgrade qemu-kvm-coreUpgrade libiscsi-utilsUpgrade libguestfs-gobject-develUpgrade nbdkit-develUpgrade libtpms-develUpgrade libvirt-libs-debuginfoUpgrade lua-guestfsUpgrade ocaml-libguestfsUpgrade nbdkit-ssh-plugin-debuginfoUpgrade libguestfs-gobjectUpgrade libvirt-debugsourceUpgrade nbdkit-gzip-filter-debuginfoUpgrade swtpm-toolsUpgrade nbdkit-tar-plugin-debuginfoUpgrade python3-libvirtUpgrade python3-libnbd-debuginfoUpgrade nbdkit-tar-pluginUpgrade libvirtUpgrade swtpm-debugsourceUpgrade libguestfs-xfsUpgrade qemu-kvm-block-rbdUpgrade qemu-imgUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-javaUpgrade nbdkit-ssh-pluginUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade python3-hivexUpgrade ocaml-libguestfs-debuginfoUpgrade virt-v2v-debuginfoUpgrade virt-dibUpgrade ocaml-libguestfs-develUpgrade nbdkit-tar-filterUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-docsUpgrade sgabiosUpgrade seavgabios-binUpgrade qemu-kvm-ui-spiceUpgrade qemu-kvm-block-iscsiUpgrade hivexUpgrade libguestfs-tools-cUpgrade perl-hivexUpgrade libvirt-wireshark-debuginfoUpgrade hivex-debuginfoUpgrade libnbd-bash-completionUpgrade libguestfs-java-develUpgrade nbdkit-basic-pluginsUpgrade supermin-debugsourceUpgrade perl-Sys-Guestfs-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-ui-openglUpgrade nbdkit-curl-plugin-debuginfoUpgrade libvirt-daemonUpgrade libiscsi-debuginfoUpgrade libguestfs-toolsUpgrade virt-v2v-debugsourceUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libguestfs-develUpgrade netcf-develUpgrade virt-v2vUpgrade nbdkit-python-pluginUpgrade libvirt-dbusUpgrade sgabios-binUpgrade libvirt-libsUpgrade netcf-debuginfoUpgrade nbdkit-server-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade ocaml-hivex-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libguestfs-rsyncUpgrade libiscsi-debugsourceUpgrade libnbd-develUpgrade nbdkit-curl-pluginUpgrade nbdkit-python-plugin-debuginfoUpgrade nbdkit-gzip-plugin-debuginfoUpgrade qemu-kvm-hw-usbredir-debuginfoUpgrade virt-v2v-man-pages-jaUpgrade libvirt-debuginfoUpgrade swtpm-develUpgrade ocaml-hivex-develUpgrade nbdkit-vddk-pluginUpgrade libguestfs-gfs2Upgrade qemu-kvm-debugsourceUpgrade libguestfs-debugsourceUpgrade virt-v2v-man-pages-ukUpgrade nbdkit-linuxdisk-plugin-debuginfoUpgrade swtpmUpgrade ruby-hivexUpgrade perl-Sys-VirtUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libtpms-debugsourceUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-wiresharkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdfuse-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-dbus-debugsourceUpgrade virt-v2v-bash-completionUpgrade nbdkit-serverUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-networkUpgrade superminUpgrade libvirt-python-debugsourceUpgrade netcf-debugsourceUpgrade nbdkit-vddk-plugin-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-sshUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-storage-iscsi-direct-debuginfoUpgrade hivex-develUpgrade nbdkit-tar-filter-debuginfoUpgrade ruby-hivex-debuginfoUpgrade ocaml-libnbd-develUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libtpmsUpgrade ocaml-libnbd-debuginfoUpgrade libvirt-nss-debuginfoUpgrade python3-libnbdUpgrade perl-hivex-debuginfoUpgrade libiscsi-develUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-img-debuginfoUpgrade supermin-debuginfoUpgrade qemu-kvm-testsUpgrade nbdfuseUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade python3-libvirt-debuginfoUpgrade qemu-guest-agentUpgrade nbdkit-tmpdisk-plugin-debuginfoUpgrade SLOFUpgrade ruby-libguestfsUpgrade nbdkit-debugsourceUpgrade nbdkit-xz-filterUpgrade libtpms-debuginfoUpgrade libnbdUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-nbd-pluginUpgrade qemu-kvm-hw-usbredirUpgrade swtpm-debuginfoUpgrade qemu-kvm-ui-spice-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvmUpgrade perl-Sys-GuestfsUpgrade libguestfs-gobject-debuginfoUpgrade swtpm-libsUpgrade libvirt-clientUpgrade nbdkit-xz-filter-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade virt-dib-debuginfoUpgrade swtpm-tools-debuginfoUpgrade swtpm-libs-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade ocaml-libnbdUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-debuginfoUpgrade libguestfs-man-pages-ukUpgrade nbdkit-gzip-filterNo solution existsUpgrade lua-guestfs-debuginfoUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade seabios-binUpgrade qemu-kvm-core-debuginfoUpgrade python3-libguestfsUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-bash-completionUpgrade seabiosUpgrade netcf-libs-debuginfo | Apr 19, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade libtpms-develUpgrade libtpms0 | Apr 28, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade libtpms0 | Mar 22, 2023 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub