GCP-2023-004

<strong>Published:</strong><br/><table class="fixed"> <thead> <tr> <th width="70%">Description</th> <th>Severity</th> <th>Notes</th> </tr> </thead> <tbody> <tr> <td> <p>Two vulnerabilities (<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-1017">CVE-2023-1017</a> and <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-1018">CVE-2023-1018</a>) were discovered in Trusted Platform Module (TPM) 2.0.</p> <p>The vulnerabilities could have allowed a sophisticated attacker to exploit a 2-byte out of bounds read/write on certain Compute Engine VMs.</p> <h4 data-text="What should I do?" id="what-should-i-do_16" tabindex="-1">What should I do?</h4> <p>A patch was automatically applied to all vulnerable VMs. No customer action is required.</p> <h4 data-text="What vulnerabilities are addressed by this patch?" id="what-vulnerabilities-are-addressed-by-this-patch_2" tabindex="-1">What vulnerabilities are addressed by this patch?</h4> <p>The patch mitigated the following vulnerabilities:</p> <h5 data-text="CVE-2023-1017" id="cve-2023-1017" tabindex="-1">CVE-2023-1017</h5> <p>With CVE-2023-2017, a buffer overrun could be triggered in the vTPM parameter decryption routine. A local attacker running on a vulnerable VM could use this to trigger a denial-of-service or possibly execute arbitrary code in the vTPM context.</p> <h5 data-text="CVE-2023-1018" id="cve-2023-1018" tabindex="-1">CVE-2023-1018</h5> <p>With CVE-2023-2018, an out-of-bounds read existed in the vTPM parameter decryption routine. A local attacker running on a vulnerable VM could use this to indirectly leak limited data from the vTPM context.</p> </td> <td> Medium </td> <td> <ul> <li><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-1017" target="mitre">CVE-2023-1017</a></li> <li><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-1018" target="mitre">CVE-2023-1018</a></li> </ul> </td> </tr> </tbody> </table>