An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtpms | May 15, 2023 | Feb 28, 2023 |
| Centos_linux | — | Upgrade libtpmsUpgrade libtpms-debugsourceUpgrade libtpms-debuginfo | May 15, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade libtpms | Jul 30, 2024 | Feb 28, 2023 |
| Msft | — | 2023-03 Cumulative Update for Microsoft Windows 11, version 22H2 (KB5023706)2023-03 Cumulative Update for Microsoft Windows 10, version 21H2 (KB5023696)2023-03 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5023697)2023-03 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5023702)2023-03 Cumulative Update for Microsoft Windows 10, version 1607 (KB5023697)2023-03 Cumulative Update for Microsoft Windows 10, version 1809 (KB5023702)2023-03 Cumulative Update for Microsoft Windows 10, version 1507 (KB5023713)2023-03 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5023705)2023-03 Cumulative Update for Microsoft Windows 10, version 22H2 (KB5023696)2023-03 Cumulative Update for Microsoft Windows 11, version 21H2 (KB5023698)2023-03 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5023705) | Mar 14, 2023 | Mar 14, 2023 |
| Oracle_linux | — | Upgrade libtpms | May 17, 2023 | Feb 28, 2023 |
| Redhat_linux | — | Upgrade nbdkit-ssh-pluginUpgrade netcf-debuginfoUpgrade ocaml-libguestfs-debuginfoUpgrade python3-hivexUpgrade virt-v2v-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libguestfs-javaUpgrade ruby-hivexUpgrade libvirt-libsUpgrade qemu-kvm-block-iscsiUpgrade ocaml-hivex-develUpgrade hivexUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-curl-plugin-debuginfoUpgrade netcf-develUpgrade nbdkit-gzip-plugin-debuginfoUpgrade libvirt-wiresharkUpgrade nbdkit-server-debuginfoUpgrade libvirt-daemonUpgrade libiscsi-debuginfoUpgrade netcf-debugsourceUpgrade libguestfs-rsyncUpgrade libguestfs-xfsUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade ocaml-hivex-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libtpms-debugsourceUpgrade qemu-kvm-ui-openglUpgrade libguestfs-man-pages-jaUpgrade nbdfuse-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-python-debugsourceUpgrade libiscsi-debugsourceUpgrade nbdkitUpgrade nbdkit-debuginfoUpgrade nbdkit-curl-pluginUpgrade nbdkit-python-plugin-debuginfoUpgrade qemu-kvm-commonUpgrade nbdkit-tar-filterUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-java-develUpgrade libvirt-develUpgrade swtpm-develUpgrade libvirt-docsUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-dbusUpgrade qemu-imgUpgrade virt-v2vUpgrade libguestfs-develUpgrade qemu-kvm-hw-usbredir-debuginfoUpgrade libvirt-debuginfoUpgrade virt-v2v-man-pages-ukUpgrade nbdkit-linuxdisk-plugin-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade ocaml-libguestfs-develUpgrade libnbd-bash-completionUpgrade libguestfs-rescueUpgrade libvirt-daemon-config-networkUpgrade virt-v2v-man-pages-jaUpgrade virt-v2v-debugsourceUpgrade qemu-kvm-ui-spiceUpgrade perl-Sys-VirtUpgrade libguestfs-gfs2Upgrade swtpmUpgrade nbdkit-vddk-pluginUpgrade sgabiosUpgrade libvirt-lock-sanlock-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-debugsourceUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libnbd-develUpgrade libguestfs-tools-cUpgrade seavgabios-binUpgrade sgabios-binUpgrade nbdkit-python-pluginUpgrade supermin-debugsourceUpgrade qemu-kvm-block-sshUpgrade libvirt-wireshark-debuginfoUpgrade nbdkit-serverUpgrade hivex-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-vddk-plugin-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-iscsi-direct-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade virt-v2v-bash-completionUpgrade superminUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-bash-completionUpgrade nbdkit-tmpdisk-pluginUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-debuginfoUpgrade virt-dibUpgrade qemu-kvm-debugsourceUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-applianceUpgrade lua-guestfsUpgrade libvirtUpgrade python3-libnbd-debuginfoUpgrade libguestfs-inspect-iconsUpgrade nbdkit-gzip-pluginUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-kvmUpgrade qemu-kvmUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade hivex-develUpgrade libguestfs-gobjectUpgrade ocaml-libguestfsUpgrade swtpm-toolsUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-ui-spice-debuginfoUpgrade python3-hivex-debuginfoUpgrade nbdkit-gzip-filter-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-qemuUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-tar-pluginUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade ocaml-libnbd-develUpgrade nbdkit-develUpgrade swtpm-tools-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade netcfUpgrade swtpm-libs-debuginfoUpgrade qemu-img-debuginfoUpgrade ocaml-hivexUpgrade nbdkit-tar-plugin-debuginfoUpgrade netcf-libsUpgrade swtpm-debugsourceUpgrade lua-guestfs-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libtpmsUpgrade nbdkit-nbd-plugin-debuginfoUpgrade libguestfs-gobject-develUpgrade swtpm-tools-pkcs11Upgrade virt-dib-debuginfoUpgrade libguestfsUpgrade perl-Sys-Virt-debugsourceUpgrade seabios-binUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-networkUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-tar-filter-debuginfoUpgrade supermin-debuginfoUpgrade nbdkit-xz-filterUpgrade nbdkit-debugsourceUpgrade libiscsiUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-basic-filters-debuginfoUpgrade qemu-kvm-docsUpgrade libnbd-debuginfoUpgrade nbdkit-ssh-plugin-debuginfoUpgrade libvirt-clientUpgrade libguestfs-bash-completionUpgrade libguestfs-gobject-debuginfoUpgrade perl-Sys-GuestfsUpgrade ruby-libguestfsUpgrade swtpm-libsUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-guest-agentUpgrade python3-libvirt-debuginfoUpgrade nbdfuseUpgrade nbdkit-xz-filter-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libtpms-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade libnbdUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-coreUpgrade nbdkit-gzip-filterUpgrade libvirt-libs-debuginfoUpgrade seabiosUpgrade python3-libvirtUpgrade ocaml-libnbdUpgrade libvirt-lock-sanlockUpgrade libtpms-develUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-testsNo solution existsUpgrade python3-libguestfsUpgrade libnbd-debugsourceUpgrade perl-hivex-debuginfoUpgrade SLOFUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-winsupportUpgrade swtpm-debuginfoUpgrade qemu-kvm-hw-usbredirUpgrade python3-libnbdUpgrade python3-libguestfs-debuginfoUpgrade ocaml-libnbd-debuginfoUpgrade nbdkit-tmpdisk-plugin-debuginfoUpgrade nbdkit-nbd-pluginUpgrade nbdkit-basic-plugins-debuginfoUpgrade hivex-debugsourceUpgrade libguestfs-debuginfoUpgrade libvirt-dbus-debuginfo | Apr 19, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade libtpms0Upgrade libtpms-devel | Apr 28, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade libtpms0 | Mar 22, 2023 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub