5.5

CVE-2022-23645

Out-of-bounds read in swtpm

swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an out-of-bounds access when the byte array representing the state of the TPM is accessed. This will likely crash swtpm or prevent it from starting since the state cannot be understood. Users should upgrade to swtpm v0.5.3, v0.6.2, or v0.7.1 to receive a patch. There are currently no known workarounds.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Swtpm Project ≫ Swtpm Version < 0.5.3
Swtpm Project ≫ Swtpm Version >= 0.6.0 < 0.6.2
Swtpm Project ≫ Swtpm Version 0.7.0 Update -
Swtpm Project ≫ Swtpm Version 0.7.0 Update rc1
Swtpm Project ≫ Swtpm Version 0.7.0 Update rc2
Redhat ≫ Enterprise Linux Version 8.0
Fedoraproject ≫ Fedora Version 35
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.32
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
security-advisories@github.com 6.2 2.5 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://github.com/stefanberger/swtpm/commit/9f740868fc36761de27df3935513bdebf8852d19
Patch
Third Party Advisory
https://github.com/stefanberger/swtpm/releases/tag/v0.5.3
Third Party Advisory
Release Notes
https://github.com/stefanberger/swtpm/releases/tag/v0.6.2
Third Party Advisory
Release Notes
https://github.com/stefanberger/swtpm/releases/tag/v0.7.1
Third Party Advisory
Release Notes
https://github.com/stefanberger/swtpm/security/advisories/GHSA-2qgm-8xf4-3hqw
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL735FW266GO4C2JX4CJBOIOB7R7AY5A/