CVE-2021-3623

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

References

Affected packages

Git / github.com/stefanberger/libtpms

Affected ranges

Type

GIT

Repo

https://github.com/stefanberger/libtpms

Events

Introduced

Fixed

bc59931b2b4c6abb7678e7f1a44be9d1dd0fc06d

Introduced

d061d8065b74a16d918a007e844b1ab66f4bdb8b

Fixed

4893c23e3bb02560588150d3f11575c2916eb759

Introduced

3fd4b94903061e156e64dc6a738237df2aebba09

Fixed

a594c4692a9623469cc8c3556b7c3ae6bae42948

Fixed

2e6173c

Fixed

2f30d62

Fixed

7981d9a

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.6.5"
        },
        {
            "introduced": "0.7.0"
        },
        {
            "fixed": "0.7.8"
        },
        {
            "introduced": "0.8.0"
        },
        {
            "fixed": "0.8.4"
        }
    ]
}

Affected versions

v0.*

v0.7.0

v0.7.1

v0.7.2

v0.7.3

v0.7.4

v0.7.5

v0.7.6

v0.7.7

v0.8.0

v0.8.1

v0.8.2

v0.8.3

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "34"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3623.json"