Skip to content
OpenAdvisories
Low ELSA-2023-7166 1 CVE

Low: tpm2-tss security and enhancement update (Oracle Linux 8)

Published Nov 17, 2023 · Updated Nov 17, 2023

Ecosystem: Oracle Linux

Summary

[2.3.2-5]
- Ensure layer number is in bounds
Resolves: rhbz#2160302
Resolves: rhbz#2162611

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 tpm2-tss 0:2.3.2-5.el8
Oracle Linux · 8 tpm2-tss-devel 0:2.3.2-5.el8

Vulnerabilities 1

  • Medium 6.4
    CVE-2023-22745

    Buffer Overlow in TSS2_RC_Decode in tpm2-tss

    tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, `Tss2_RC_SetHandler` and `Tss2_RC_Decode` both index into `lay…

    tpm2-software tpm2-tss tpm2-tss tpm2-tss Debian Ubuntu Azure Linux