Skip to content
OpenAdvisories
Medium RHSA-2023:7166 1 CVE

Red Hat Security Advisory: tpm2-tss security and enhancement update

Published Sep 16, 2024 · Updated Jul 3, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos tpm2-tss 0:2.3.2-5.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos tpm2-tss-debuginfo 0:2.3.2-5.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos tpm2-tss-debugsource 0:2.3.2-5.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos tpm2-tss-devel 0:2.3.2-5.el8

Vulnerabilities 1

  • Medium 6.4
    CVE-2023-22745

    Buffer Overlow in TSS2_RC_Decode in tpm2-tss

    tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, `Tss2_RC_SetHandler` and `Tss2_RC_Decode` both index into `lay…

    tpm2-software tpm2-tss tpm2-tss tpm2-tss Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2162610
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7166.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-22745
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-22745
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-22745
  • article
    https://github.com/tpm2-software/tpm2-tss/security/advisories/GHSA-4j3v-fh23-vx67