An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.
References
Link | Resource |
---|---|
https://kb.cert.org/vuls/id/782720 | Third Party Advisory US Government Resource |
https://trustedcomputinggroup.org/about/security/ | Vendor Advisory |
https://trustedcomputinggroup.org/wp-content/uploads/TCGVRT0007-Advisory-FINAL.pdf | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: certcc
Published: 2023-02-28T17:54:33.260Z
Updated: 2023-02-28T19:08:19.512Z
Reserved: 2023-02-24T16:06:48.994Z
Link: CVE-2023-1018
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-02-28T18:15:10.290
Modified: 2024-04-01T15:50:11.033
Link: CVE-2023-1018
JSON object: View
Redhat Information
No data.
CWE