Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3.

The remote host is affected by the vulnerability described in GLSA-202107-10 (TCG TPM2 Software Stack: Information disclosure)

    TCG TPM2 Software Stack did not appropriately apply FAPI policies to       protect data encrypted with the trusted platform module.
  Impact :

    Data encrypted using TCG TPM2 Software Stack (tpm2-tss) may not be       protected from an attacker.
  Workaround :

    There is no known workaround at this time.

According to the version of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - Missing initialization of a variable in the TPM2 source     may allow a privileged user to potentially enable an     escalation of privilege via local access. This affects     tpm2-tss before 3.0.1 and before 2.4.3.(CVE-2020-24455)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the tpm2-tss package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - tpm2-tss is a software stack supporting Trusted     Platform Module(TPM) 2.0 system APIs. It sits between     TPM driver and applications, providing TPM2.0 specified     APIs for applications to access TPM module through     kernel TPM drivers.Security Fix(es):FAPI PolicyPCR not     instatiating correctly.(CVE-2020-24455)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the tpm2-tss package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - FAPI PolicyPCR not instatiating     correctly.(CVE-2020-24455)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

tpm2-tss 3.0.1 changed or fixed :

&bull; Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly

&bull; Note that all TPM object created with a PolicyPCR with the currentPcrs

&bull; and currentPcrsAndBank options have been created with an incorrect policy

&bull; that ommits PCR checks. All these objects have to be recreated!

&bull; Fix bug in FAPI NV creation with custom index values

&bull; Cleanup of leftover sessions in error cases in FAPI

&bull; Better error messages in several FAPI errors

&bull; Add checks to FAPI policy paths

&bull; Add checks if FAPI is correctly provisioned

&bull; Fix execution of FAPI policies in some cases

&bull; Allow 0x prefixes for TPMU_HA in JSON encoding

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

tpm2-tss 2.4.3 changed or fixed :

&bull; Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly &bull; Note that all TPM object created with a PolicyPCR with the currentPcrs &bull; and currentPcrsAndBank options have been created with an incorrect policy &bull; that ommits PCR checks. All these objects have to be recreated! &bull; Fix bug in FAPI NV creation with custom index values &bull; Cleanup of leftover sessions in error cases in FAPI &bull; Better error messages in several FAPI errors &bull; Add checks to FAPI policy paths &bull; Add checks if FAPI is correctly provisioned &bull; Fix execution of FAPI policies in some cases &bull;
Allow 0x prefixes for TPMU_HA in JSON encoding

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
156970	GLSA-202107-10 : TCG TPM2 Software Stack: Information disclosure	Nessus	Gentoo Local Security Checks	medium
148619	EulerOS Virtualization 2.9.1 : tpm2-tss (EulerOS-SA-2021-1727)	Nessus	Huawei Local Security Checks	medium
148609	EulerOS Virtualization 2.9.0 : tpm2-tss (EulerOS-SA-2021-1752)	Nessus	Huawei Local Security Checks	medium
146253	EulerOS 2.0 SP9 : tpm2-tss (EulerOS-SA-2021-1259)	Nessus	Huawei Local Security Checks	medium
146220	EulerOS 2.0 SP9 : tpm2-tss (EulerOS-SA-2021-1278)	Nessus	Huawei Local Security Checks	medium
141282	Fedora 33 : tpm2-tss (2020-1d3fcce2a3)	Nessus	Fedora Local Security Checks	medium
141248	Fedora 32 : tpm2-tss (2020-bb8e3c5548)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2020-24455

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium