CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-3565

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 41.5%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2021-3565

Tpm2-Tools Project » Tpm2-Tools » Version: N/A

cpe:2.3:a:tpm2-tools_project:tpm2-tools:-
Tpm2-Tools Project » Tpm2-Tools » Version: 1.1.1

cpe:2.3:a:tpm2-tools_project:tpm2-tools:1.1.1
Tpm2-Tools Project » Tpm2-Tools » Version: 2.0.0

cpe:2.3:a:tpm2-tools_project:tpm2-tools:2.0.0
Tpm2-Tools Project » Tpm2-Tools » Version: 2.1.0

cpe:2.3:a:tpm2-tools_project:tpm2-tools:2.1.0
Tpm2-Tools Project » Tpm2-Tools » Version: 2.1.1

cpe:2.3:a:tpm2-tools_project:tpm2-tools:2.1.1
Tpm2-Tools Project » Tpm2-Tools » Version: 2.1.2

cpe:2.3:a:tpm2-tools_project:tpm2-tools:2.1.2
Tpm2-Tools Project » Tpm2-Tools » Version: 3.0

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0
Tpm2-Tools Project » Tpm2-Tools » Version: 3.0.1

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0.1
Tpm2-Tools Project » Tpm2-Tools » Version: 3.0.2

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0.2
Tpm2-Tools Project » Tpm2-Tools » Version: 3.0.3

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0.3
Tpm2-Tools Project » Tpm2-Tools » Version: 3.0.4

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0.4
Tpm2-Tools Project » Tpm2-Tools » Version: 3.0.5

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.0.5
Tpm2-Tools Project » Tpm2-Tools » Version: 3.1.0

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.1.0
Tpm2-Tools Project » Tpm2-Tools » Version: 3.1.1

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.1.1
Tpm2-Tools Project » Tpm2-Tools » Version: 3.1.2

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.1.2
Tpm2-Tools Project » Tpm2-Tools » Version: 3.1.3

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.1.3
Tpm2-Tools Project » Tpm2-Tools » Version: 3.1.4

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.1.4
Tpm2-Tools Project » Tpm2-Tools » Version: 3.2.0

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.2.0
Tpm2-Tools Project » Tpm2-Tools » Version: 3.2.1

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.2.1
Tpm2-Tools Project » Tpm2-Tools » Version: 3.2.2

cpe:2.3:a:tpm2-tools_project:tpm2-tools:3.2.2
Tpm2-Tools Project » Tpm2-Tools » Version: 4.0

cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.0
Tpm2-Tools Project » Tpm2-Tools » Version: 4.0.1

cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.0.1
Tpm2-Tools Project » Tpm2-Tools » Version: 4.1

cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.1
Tpm2-Tools Project » Tpm2-Tools » Version: 4.1.1

cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.1.1
Tpm2-Tools Project » Tpm2-Tools » Version: 4.1.2

cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.1.2
Tpm2-Tools Project » Tpm2-Tools » Version: 4.1.3

cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.1.3
Tpm2-Tools Project » Tpm2-Tools » Version: 4.2

cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.2
Tpm2-Tools Project » Tpm2-Tools » Version: 4.2.1

cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.2.1
Tpm2-Tools Project » Tpm2-Tools » Version: 4.3.0

cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.3.0
Tpm2-Tools Project » Tpm2-Tools » Version: 4.3.1

cpe:2.3:a:tpm2-tools_project:tpm2-tools:4.3.1
Tpm2-Tools Project » Tpm2-Tools » Version: 5.1

cpe:2.3:a:tpm2-tools_project:tpm2-tools:5.1
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-3565

Products

Pricing

Contact Us