CVE-2021-3623 log

Source
Severity Medium
Remote No
Type Information disclosure
Description
A security issue was found in libtpms before version 0.8.4. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read.
Group Package Affected Fixed Severity Status Ticket
AVG-2108 libtpms 0.8.3-1 0.8.4-1 Medium Fixed
Date Advisory Group Package Severity Type
01 Jul 2021 ASA-202107-9 AVG-2108 libtpms Medium information disclosure
References
https://bugzilla.redhat.com/show_bug.cgi?id=1976806
https://github.com/stefanberger/libtpms/pull/223
https://github.com/stefanberger/libtpms/pull/225
https://github.com/stefanberger/libtpms/commit/f16250b35aff6995e540143a9858c9cf0d1f9573
https://github.com/stefanberger/libtpms/commit/3ef9b26cb9f28bd64d738bff9505a20d4eb56acd
https://github.com/stefanberger/libtpms/commit/5cc98a62dc6f204dcf5b87c2ee83ac742a6a319b