Vulnerability · Published Feb 28, 2023 · Assigned by certcc
CVE-2023-1017TPM2.0 vulnerable to out-of-bounds write
High 7.8
In plain English
A high-severity security flaw in TPM2.0 from Trusted Computing Group. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | libtpms | 0.9.1-3.20211126git1ff6fe1f43.el9_2 | ALSA-2023:2453 |
| Debian:12 | libtpms | 0.9.2-3.1 | DEBIAN-CVE-2023-1017 |
| Debian:13 | libtpms | 0.9.2-3.1 | DEBIAN-CVE-2023-1017 |
| Debian:14 | libtpms | 0.9.2-3.1 | DEBIAN-CVE-2023-1017 |
| Ubuntu:22.04:LTS | libtpms | 0.9.3-0ubuntu1.22.04.1 | USN-5933-1 |
| Ubuntu:22.04:LTS | libtpms | 0.9.3-0ubuntu1.22.04.1 | UBUNTU-CVE-2023-1017 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trusted Computing Group | TPM2.0 | 1.59 |
| Trusted Computing Group | TPM2.0 | 1.38 |
| Trusted Computing Group | TPM2.0 | 1.19 |