Skip to content
OpenAdvisories
Medium RHSA-2022:8100 1 CVE

Red Hat Security Advisory: swtpm security and bug fix update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream swtpm 0:0.7.0-3.20211109gitb79fd91.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream swtpm-debuginfo 0:0.7.0-3.20211109gitb79fd91.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream swtpm-debugsource 0:0.7.0-3.20211109gitb79fd91.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream swtpm-libs 0:0.7.0-3.20211109gitb79fd91.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream swtpm-libs-debuginfo 0:0.7.0-3.20211109gitb79fd91.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream swtpm-tools 0:0.7.0-3.20211109gitb79fd91.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream swtpm-tools-debuginfo 0:0.7.0-3.20211109gitb79fd91.el9

Vulnerabilities 1

  • Medium 6.2
    CVE-2022-23645

    Out-of-bounds read in swtpm

    swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicato…

    stefanberger swtpm swtpm Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2056491
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2090219
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8100.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-23645
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-23645
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-23645