DeutschShown in its original language — a full translation is planned for a future version.
TPM 2.0 Referenzimplementierung: Mehrere Schwachstellen
view advisory published 2023-02-28
Ein lokaler Angreifer kann mehrere Schwachstellen in der TPM 2.0 Referenzimplementierung ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen und um Informationen aus dem TPM offenzulegen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-1017US | high7.8 | — | ||
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An… | ||||
| CVE-2023-1018US | medium5.5 | — | ||
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker w… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:1833 vom 2023-04-19external
- Red Hat Security Advisory RHSA-2023:2453 vom 2023-05-09external
- Rocky Linux Security Advisory RLSA-2023:2757 vom 2025-12-03external
- CERT/CC Vulnerability Note VU#782720 vom 2023-02-28external
- Oracle Linux Security Advisory ELSA-2023-3822 vom 2023-07-08external
- SUSE Security Update SUSE-SU-2023:2051-1 vom 2023-04-27external
- Microsoft Leitfaden für Sicherheitsupdates vom 2023-03-14external
- Lenovo Security Advisory LEN-118320 vom 2023-02-28external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan