Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
libtpms project libtpms vulnerabilities and exploits
(subscribe to this query)
2.1
CVSSv2
CVE-2021-3569
A stack corruption bug was found in libtpms in versions prior to 0.7.2 and prior to 0.8.0 while decrypting data using RSA. This flaw could result in a SIGBUS (bad memory access) and termination of swtpm. The highest threat from this vulnerability is to system availability.
Libtpms Project Libtpms
Redhat Enterprise Linux 8.0
2.1
CVSSv2
CVE-2021-3505
A flaw was found in libtpms in versions prior to 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate(), which is called before the prime number che...
Libtpms Project Libtpms
Redhat Enterprise Linux 8.0
Fedoraproject Fedora 33
7.1
CVSSv2
CVE-2021-3746
A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat...
Libtpms Project Libtpms
Fedoraproject Fedora 34
Redhat Enterprise Linux 8.0
2.1
CVSSv2
CVE-2021-3446
A flaw was found in libtpms in versions prior to 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the in...
Libtpms Project Libtpms
Redhat Enterprise Linux 8.0
Fedoraproject Fedora 33
3.6
CVSSv2
CVE-2021-3623
A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulner...
Libtpms Project Libtpms
Redhat Enterprise Linux 8.0
Fedoraproject Fedora 34
2.1
CVSSv2
CVE-2022-23645
swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions before 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an inva...
Swtpm Project Swtpm 0.7.0
Swtpm Project Swtpm
Redhat Enterprise Linux 8.0
Fedoraproject Fedora 35
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-26978
CVE-2024-26982
wireless
CVE-2023-6949
CVE-2024-26980
CVE-2024-32766
CVE-2024-26939
cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started