CVE-2021-3623 log

Severity Medium
Remote No
Type Information disclosure
A security issue was found in libtpms before version 0.8.4. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read.
Group Package Affected Fixed Severity Status Ticket
AVG-2108 libtpms 0.8.3-1 0.8.4-1 Medium Fixed
Date Advisory Group Package Severity Type
01 Jul 2021 ASA-202107-9 AVG-2108 libtpms Medium information disclosure