REDHAT-BUG-2149420: Medium severity Trusted Computing Group TPM2.0 vulnerability

Published Nov 29, 2022

Updated

A out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can sensitive data stored in the TPM.

Affected Software

1 affected component

Trusted Computing Group TPM2.0

Event History

Nov 29, 2022

Data Sourced

via Red Hat·08:50 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2149420?

The severity of REDHAT-BUG-2149420 is critical due to potential exploitation that could lead to sensitive data exposure.

How do I fix REDHAT-BUG-2149420?

To fix REDHAT-BUG-2149420, apply the latest security patches provided by Trusted Computing Group for TPM2.0.

What systems are affected by REDHAT-BUG-2149420?

REDHAT-BUG-2149420 affects systems utilizing the Trusted Computing Group TPM2.0 module.

What type of exploitation does REDHAT-BUG-2149420 allow?

REDHAT-BUG-2149420 allows for an out-of-bounds read, enabling attackers to access sensitive data stored in the TPM.

Is there a risk of data loss due to REDHAT-BUG-2149420?

Yes, the exploitation of REDHAT-BUG-2149420 can lead to unauthorized access and potential loss of sensitive data.