Skip to content
OpenAdvisories
Medium RHSA-2024:4408 1 CVE

Red Hat Security Advisory: tpm2-tss security update

Published Sep 16, 2024 · Updated Jul 3, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos tpm2-tss 0:2.3.2-5.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos tpm2-tss-debuginfo 0:2.3.2-5.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos tpm2-tss-debugsource 0:2.3.2-5.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos tpm2-tss-devel 0:2.3.2-5.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos tpm2-tss 0:2.3.2-5.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos tpm2-tss-debuginfo 0:2.3.2-5.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos tpm2-tss-debugsource 0:2.3.2-5.el8_6
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos tpm2-tss-devel 0:2.3.2-5.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos tpm2-tss 0:2.3.2-5.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos tpm2-tss-debuginfo 0:2.3.2-5.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos tpm2-tss-debugsource 0:2.3.2-5.el8_6
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos tpm2-tss-devel 0:2.3.2-5.el8_6

Vulnerabilities 1

  • Medium 6.4
    CVE-2023-22745

    Buffer Overlow in TSS2_RC_Decode in tpm2-tss

    tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, `Tss2_RC_SetHandler` and `Tss2_RC_Decode` both index into `lay…

    tpm2-software tpm2-tss tpm2-tss tpm2-tss Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2162610
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4408.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-22745
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-22745
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-22745
  • article
    https://github.com/tpm2-software/tpm2-tss/security/advisories/GHSA-4j3v-fh23-vx67