tpm2.0 vulnerabilities and exploits

(subscribe to this query)

tpm2-tools versions prior to 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.

Tpm 2.0 Tools Tpm2-tools Tpm2-tools Project Tpm2.0-tools

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata 1.83 of TCG standard TPM2.0

Trusted Computing Group Tpm2.0

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashin...

Trusted Computing Group Tpm2.0 Trustedcomputinggroup Trusted Platform Module 2.0 Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 20h2 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 21h2 Microsoft Windows 11 22h2 Microsoft Windows Server 2016 Microsoft Windows Server 2019

2 Github repositories1 Article

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the ...

Trusted Computing Group Tpm2.0 Trustedcomputinggroup Trusted Platform Module 2.0 Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 20h2 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 21h2 Microsoft Windows 11 22h2 Microsoft Windows Server 2016 Microsoft Windows Server 2019

2 Github repositories1 Article

tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.

Tpm2-software Tpm2-tools

tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows malicious users to manipulate tpm2_checkquote outputs by altering the TPML_PCR_SELECTION in the PCR input file. As a result, digest values are incorrectly mapped to PCR slots a...

Tpm2 Software Tpm2 Tools Tpm2-software Tpm2-tools

An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions before 0.3.0 can lead an eavesdropping malicious user to discover the auth value for a key created with CreateWrapKey. An attacker listening in on the channel can collect bot...

Google Llc Google/go-tpm Library Google Go-tpm

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook