MGASA-2021-0353
- Source
- https://advisories.mageia.org/MGASA-2021-0353.html
- Import Source
- https://advisories.mageia.org/MGASA-2021-0353.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2021-0353
- Related
- Published
- 2021-07-16T08:25:31Z
- Modified
- 2021-07-16T08:01:33Z
- Summary
- Updated tpm2-tools package fixes security vulnerability
- Details
-
A flaw was found in tpm2-tools. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality (CVE-2021-3565).
- References
- Credits
-
-
- Mageia - COORDINATOR
-