Vulnetix
Try Vulnetix Request Demo
CVE-2021-3565 PUBLISHED

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.

EPSS 0.39% · 59.8th percentile

Risk Scores

EPSS Score
0.39%
59.8th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTStpm2-tools5.2-1, 5.0-2, 0
Ubuntu:24.04:LTStpm2-tools5.6-1build1, 5.6-1build3, 5.6-1build4
Ubuntu:20.04:LTStpm2-tools4.0.1-1, 3.1.3-2, 0
Ubuntu:16.04:LTStpm2-tools0, 1.0.0+20160226.64b3334-0ubuntu1, 1.0.0+20160226.64b3334-0ubuntu2
Ubuntu:25.10tpm2-tools0, 5.7-1

Timeline

References

Open in Interactive Console →