CVE-2021-3623 — Out-of-bounds Write in Project Libtpms

Vendor	Product	Version range	Fixed in
debian	libtpms	< libtpms 0.9.1-1 (bookworm)	libtpms 0.9.1-1 (bookworm)
fedoraproject	fedora	—	—
libtpms_project	libtpms	< 0.6.5	0.6.5
libtpms_project	libtpms	—	—
libtpms_project	libtpms	>= 0 < 0.9.1-1	0.9.1-1
libtpms_project	libtpms	>= 0 < 0.9.1-1	0.9.1-1
libtpms_project	libtpms	>= 0 < 0.9.1-1	0.9.1-1
libtpms_project	libtpms	>= 0.7.0 < 0.7.8	0.7.8
libtpms_project	libtpms	>= 0.8.0 < 0.8.4	0.8.4
redhat	enterprise_linux	—	—

Red Hat

libtpms: out-of-bounds access when trying to resume the state of the vTPM

vendor_redhat·2021-06-21·CVSS 6.1

CVE-2021-3623 [MEDIUM] CWE-787 libtpms: out-of-bounds access when trying to resume the state of the vTPM libtpms: out-of-bounds access when trying to resume the state of the vTPM A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability. A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability. Statement: The versions of `libtpms` as shipped with Red Hat Enterprise Linux 8 Advanced Virt

Debian

CVE-2021-3623: libtpms - A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM ...

vendor_debian·2021·CVSS 6.1

CVE-2021-3623 [MEDIUM] CVE-2021-3623: libtpms - A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM ... A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability. Scope: local bookworm: resolved (fixed in 0.9.1-1) forky: resolved (fixed in 0.9.1-1) sid: resolved (fixed in 0.9.1-1) trixie: resolved (fixed in 0.9.1-1)

GHSA

GHSA-6527-9qhc-39j4: A flaw was found in libtpms

ghsa_unreviewed·2022-03-04

CVE-2021-3623 [HIGH] CWE-787 GHSA-6527-9qhc-39j4: A flaw was found in libtpms A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

OSV

CVE-2021-3623: A flaw was found in libtpms

osv·2022-03-02·CVSS 6.1

CVE-2021-3623 [MEDIUM] CVE-2021-3623: A flaw was found in libtpms A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

CVE-2021-3623: A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds…

Affected

CVSS provenance