CVEvulnerability

CVE-2021-3746

6.5 MEDIUM Published 2021-10-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-10-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-119

Description

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerability is to system availability. This issue affects libtpms versions before 0.8.5, before 0.7.9 and before 0.6.6.

Affected configurations

• libtpms project libtpms (>= 0.6.0 < 0.6.6) • libtpms project libtpms (>= 0.7.0 < 0.7.9) • libtpms project libtpms (>= 0.8.0 < 0.8.5) • fedoraproject fedora 34 • redhat enterprise linux 8.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References