{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "TCG TPM2.0 implementations vulnerable to memory corruption", "tracking": { "current_release_date": "2026-08-11T16:46:21+00:00", "generator": { "date": "2026-08-11T16:46:21+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2023-1018", "initial_release_date": "2023-02-28T00:00:00+00:00", "revision_history": [ { "date": "2026-08-11T16:46:21+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.6::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::crb", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.6::crb" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.7", "product": { "name": "Red Hat Enterprise Linux 8.7", "product_id": "rhel-8.7.0.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8", "product": { "name": "Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8", "product": { "name": "Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8", "product": { "name": "Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::crb", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::crb" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.1", "product": { "name": "Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.2", "product": { "name": "Red Hat Enterprise Linux 9.2", "product_id": "rhel-9.2.0::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_name", "name": "RHEL Advanced Virtualization rhel-8.4.0.z", "product": { "name": "RHEL Advanced Virtualization rhel-8.4.0.z", "product_id": "rhel-av-8.virtualization", "product_identification_helper": { "cpe": "cpe:/a:redhat:advanced_virtualization:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.6::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::crb", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.6::crb" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8", "product": { "name": "Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8", "product": { "name": "Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::crb", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::crb" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.2", "product": { "name": "Red Hat Enterprise Linux 9.2", "product_id": "rhel-br-9.2.0::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_version", "name": "hivex", "product": { "name": "hivex", "product_id": "hivex", "product_identification_helper": { "purl": "pkg:rpm/redhat/hivex" } } }, { "category": "product_version", "name": "hivex", "product": { "name": "hivex", "product_id": "hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/hivex@1.3.18-23.module%2Bel8.6.0%2B14480%2Bc0a3aa0f?arch=src&epoch=0" } } }, { "category": "product_version", "name": "hivex", "product": { "name": "hivex", "product_id": "hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/hivex@1.3.18-23.module%2Bel8.8.0%2B16781%2B9f4724c2?arch=src&epoch=0" } } }, { "category": "product_version", "name": "hivex-debuginfo", "product": { "name": "hivex-debuginfo", "product_id": "hivex-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/hivex-debuginfo" } } }, { "category": "product_version", "name": "hivex-debugsource", "product": { "name": "hivex-debugsource", "product_id": "hivex-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/hivex-debugsource" } } }, { "category": "product_version", "name": "hivex-devel", "product": { "name": "hivex-devel", "product_id": "hivex-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/hivex-devel" } } }, { "category": "product_version", "name": "libtpms", "product": { "name": "libtpms", "product_id": "libtpms", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtpms" } } }, { "category": "product_version", "name": "libtpms", "product": { "name": "libtpms", "product_id": "libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtpms@0.9.1-3.20211126git1ff6fe1f43.el9_2?epoch=0" } } }, { "category": "product_version", "name": "libtpms", "product": { "name": "libtpms", "product_id": "libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtpms@0.9.1-3.20211126git1ff6fe1f43.el9_2?arch=src&epoch=0" } } }, { "category": "product_version", "name": "libtpms-debuginfo", "product": { "name": "libtpms-debuginfo", "product_id": "libtpms-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtpms-debuginfo" } } }, { "category": "product_version", "name": "libtpms-debugsource", "product": { "name": "libtpms-debugsource", "product_id": "libtpms-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtpms-debugsource" } } }, { "category": "product_version", "name": "libtpms-devel", "product": { "name": "libtpms-devel", "product_id": "libtpms-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtpms-devel" } } }, { "category": "product_version", "name": "libtpms", "product": { "name": "libtpms", "product_id": "libtpms.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtpms?arch=src" } } }, { "category": "product_version", "name": "ocaml-hivex", "product": { "name": "ocaml-hivex", "product_id": "ocaml-hivex", "product_identification_helper": { "purl": "pkg:rpm/redhat/ocaml-hivex" } } }, { "category": "product_version", "name": "ocaml-hivex-debuginfo", "product": { "name": "ocaml-hivex-debuginfo", "product_id": "ocaml-hivex-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/ocaml-hivex-debuginfo" } } }, { "category": "product_version", "name": "ocaml-hivex-devel", "product": { "name": "ocaml-hivex-devel", "product_id": "ocaml-hivex-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/ocaml-hivex-devel" } } }, { "category": "product_version", "name": "perl-hivex", "product": { "name": "perl-hivex", "product_id": "perl-hivex", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-hivex" } } }, { "category": "product_version", "name": "perl-hivex-debuginfo", "product": { "name": "perl-hivex-debuginfo", "product_id": "perl-hivex-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-hivex-debuginfo" } } }, { "category": "product_version", "name": "python3-hivex", "product": { "name": "python3-hivex", "product_id": "python3-hivex", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-hivex" } } }, { "category": "product_version", "name": "python3-hivex-debuginfo", "product": { "name": "python3-hivex-debuginfo", "product_id": "python3-hivex-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-hivex-debuginfo" } } }, { "category": "product_version", "name": "ruby-hivex", "product": { "name": "ruby-hivex", "product_id": "ruby-hivex", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby-hivex" } } }, { "category": "product_version", "name": "ruby-hivex-debuginfo", "product": { "name": "ruby-hivex-debuginfo", "product_id": "ruby-hivex-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby-hivex-debuginfo" } } }, { "category": "product_version", "name": "SLOF", "product": { "name": "SLOF", "product_id": "SLOF", "product_identification_helper": { "purl": "pkg:rpm/redhat/SLOF" } } }, { "category": "product_version", "name": "SLOF", "product": { "name": "SLOF", "product_id": "SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/SLOF@20210217-1.module%2Bel8.6.0%2B14480%2Bc0a3aa0f?arch=src&epoch=0" } } }, { "category": "product_version", "name": "SLOF", "product": { "name": "SLOF", "product_id": "SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/SLOF@20210217-1.module%2Bel8.8.0%2B16781%2B9f4724c2?arch=src&epoch=0" } } }, { "category": "product_version", "name": "virt:8.2/libtpms", "product": { "name": "virt:8.2/libtpms", "product_id": "virt:8.2/libtpms.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtpms?arch=src&rpmmod=virt:8.2" } } }, { "category": "product_version", "name": "virt:8.3/libtpms", "product": { "name": "virt:8.3/libtpms", "product_id": "virt:8.3/libtpms.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtpms?arch=src&rpmmod=virt:8.3" } } }, { "category": "product_version", "name": "virt:av/libtpms", "product": { "name": "virt:av/libtpms", "product_id": "virt:av/libtpms.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtpms?arch=src&rpmmod=virt:av" } } }, { "category": "product_version", "name": "virt:rhel:8080020230410211546:fd72936b/virt", "product": { "name": "virt:rhel:8080020230410211546:fd72936b/virt", "product_id": "virt:rhel:8080020230410211546:fd72936b/virt", "product_identification_helper": { "purl": "pkg:rpm/redhat/virt?rpmmod=virt:rhel:8080020230410211546:fd72936b" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "hivex as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:hivex" }, "product_reference": "hivex", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:hivex" }, "product_reference": "hivex", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::appstream:hivex" }, "product_reference": "hivex", "relates_to_product_reference": "rhel-br-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::appstream:hivex" }, "product_reference": "hivex", "relates_to_product_reference": "rhel-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::appstream:hivex" }, "product_reference": "hivex", "relates_to_product_reference": "rhel-br-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src" }, "product_reference": "hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::appstream:hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src" }, "product_reference": "hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src", "relates_to_product_reference": "rhel-br-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src" }, "product_reference": "hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src" }, "product_reference": "hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "relates_to_product_reference": "rhel-br-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src" }, "product_reference": "hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "relates_to_product_reference": "rhel-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:hivex-debuginfo" }, "product_reference": "hivex-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:hivex-debuginfo" }, "product_reference": "hivex-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-debugsource as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:hivex-debugsource" }, "product_reference": "hivex-debugsource", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:hivex-debugsource" }, "product_reference": "hivex-debugsource", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:hivex-devel" }, "product_reference": "hivex-devel", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:hivex-devel" }, "product_reference": "hivex-devel", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-devel as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::appstream:hivex-devel" }, "product_reference": "hivex-devel", "relates_to_product_reference": "rhel-br-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-devel as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::appstream:hivex-devel" }, "product_reference": "hivex-devel", "relates_to_product_reference": "rhel-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "hivex-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::appstream:hivex-devel" }, "product_reference": "hivex-devel", "relates_to_product_reference": "rhel-br-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms as a component of RHEL Advanced Virtualization rhel-8.4.0.z", "product_id": "rhel-av-8.virtualization:libtpms" }, "product_reference": "libtpms", "relates_to_product_reference": "rhel-av-8.virtualization" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0.z:libtpms" }, "product_reference": "libtpms", "relates_to_product_reference": "rhel-9.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2 as a component of Red Hat Enterprise Linux 9.2", "product_id": "rhel-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2" }, "product_reference": "libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2", "relates_to_product_reference": "rhel-9.2.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2 as a component of Red Hat Enterprise Linux 9.2", "product_id": "rhel-br-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2" }, "product_reference": "libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2", "relates_to_product_reference": "rhel-br-9.2.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src as a component of Red Hat Enterprise Linux 9.2", "product_id": "rhel-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src" }, "product_reference": "libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src", "relates_to_product_reference": "rhel-9.2.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src as a component of Red Hat Enterprise Linux 9.2", "product_id": "rhel-br-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src" }, "product_reference": "libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src", "relates_to_product_reference": "rhel-br-9.2.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms-debuginfo as a component of Red Hat Enterprise Linux 9.2", "product_id": "rhel-br-9.2.0::appstream:libtpms-debuginfo" }, "product_reference": "libtpms-debuginfo", "relates_to_product_reference": "rhel-br-9.2.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms-debuginfo as a component of Red Hat Enterprise Linux 9.2", "product_id": "rhel-9.2.0::appstream:libtpms-debuginfo" }, "product_reference": "libtpms-debuginfo", "relates_to_product_reference": "rhel-9.2.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms-debugsource as a component of Red Hat Enterprise Linux 9.2", "product_id": "rhel-br-9.2.0::appstream:libtpms-debugsource" }, "product_reference": "libtpms-debugsource", "relates_to_product_reference": "rhel-br-9.2.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms-debugsource as a component of Red Hat Enterprise Linux 9.2", "product_id": "rhel-9.2.0::appstream:libtpms-debugsource" }, "product_reference": "libtpms-debugsource", "relates_to_product_reference": "rhel-9.2.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms-devel as a component of RHEL Advanced Virtualization rhel-8.4.0.z", "product_id": "rhel-av-8.virtualization:libtpms-devel" }, "product_reference": "libtpms-devel", "relates_to_product_reference": "rhel-av-8.virtualization" }, { "category": "default_component_of", "full_product_name": { "name": "libtpms.src as a component of Red Hat Enterprise Linux 9.1", "product_id": "rhel-9.1.0.z:libtpms.src" }, "product_reference": "libtpms.src", "relates_to_product_reference": "rhel-9.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:ocaml-hivex" }, "product_reference": "ocaml-hivex", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::appstream:ocaml-hivex" }, "product_reference": "ocaml-hivex", "relates_to_product_reference": "rhel-br-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::appstream:ocaml-hivex" }, "product_reference": "ocaml-hivex", "relates_to_product_reference": "rhel-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:ocaml-hivex" }, "product_reference": "ocaml-hivex", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::appstream:ocaml-hivex" }, "product_reference": "ocaml-hivex", "relates_to_product_reference": "rhel-br-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:ocaml-hivex-debuginfo" }, "product_reference": "ocaml-hivex-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:ocaml-hivex-debuginfo" }, "product_reference": "ocaml-hivex-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:ocaml-hivex-devel" }, "product_reference": "ocaml-hivex-devel", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:ocaml-hivex-devel" }, "product_reference": "ocaml-hivex-devel", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex-devel as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::appstream:ocaml-hivex-devel" }, "product_reference": "ocaml-hivex-devel", "relates_to_product_reference": "rhel-br-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex-devel as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::appstream:ocaml-hivex-devel" }, "product_reference": "ocaml-hivex-devel", "relates_to_product_reference": "rhel-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ocaml-hivex-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::appstream:ocaml-hivex-devel" }, "product_reference": "ocaml-hivex-devel", "relates_to_product_reference": "rhel-br-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "perl-hivex as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:perl-hivex" }, "product_reference": "perl-hivex", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "perl-hivex as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::appstream:perl-hivex" }, "product_reference": "perl-hivex", "relates_to_product_reference": "rhel-br-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "perl-hivex as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::appstream:perl-hivex" }, "product_reference": "perl-hivex", "relates_to_product_reference": "rhel-br-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "perl-hivex as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:perl-hivex" }, "product_reference": "perl-hivex", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "perl-hivex as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::appstream:perl-hivex" }, "product_reference": "perl-hivex", "relates_to_product_reference": "rhel-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "perl-hivex-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:perl-hivex-debuginfo" }, "product_reference": "perl-hivex-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "perl-hivex-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:perl-hivex-debuginfo" }, "product_reference": "perl-hivex-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-hivex as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:python3-hivex" }, "product_reference": "python3-hivex", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-hivex as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::appstream:python3-hivex" }, "product_reference": "python3-hivex", "relates_to_product_reference": "rhel-br-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-hivex as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::appstream:python3-hivex" }, "product_reference": "python3-hivex", "relates_to_product_reference": "rhel-br-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-hivex as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:python3-hivex" }, "product_reference": "python3-hivex", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-hivex as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::appstream:python3-hivex" }, "product_reference": "python3-hivex", "relates_to_product_reference": "rhel-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-hivex-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:python3-hivex-debuginfo" }, "product_reference": "python3-hivex-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "python3-hivex-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:python3-hivex-debuginfo" }, "product_reference": "python3-hivex-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-hivex as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::appstream:ruby-hivex" }, "product_reference": "ruby-hivex", "relates_to_product_reference": "rhel-br-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-hivex as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:ruby-hivex" }, "product_reference": "ruby-hivex", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-hivex as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::appstream:ruby-hivex" }, "product_reference": "ruby-hivex", "relates_to_product_reference": "rhel-br-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-hivex as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:ruby-hivex" }, "product_reference": "ruby-hivex", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-hivex as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::appstream:ruby-hivex" }, "product_reference": "ruby-hivex", "relates_to_product_reference": "rhel-8.8.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-hivex-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:ruby-hivex-debuginfo" }, "product_reference": "ruby-hivex-debuginfo", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-hivex-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::appstream:ruby-hivex-debuginfo" }, "product_reference": "ruby-hivex-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "SLOF as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::crb:SLOF" }, "product_reference": "SLOF", "relates_to_product_reference": "rhel-br-8.6.0.z.eus::crb" }, { "category": "default_component_of", "full_product_name": { "name": "SLOF as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::crb:SLOF" }, "product_reference": "SLOF", "relates_to_product_reference": "rhel-br-8.8.0::crb" }, { "category": "default_component_of", "full_product_name": { "name": "SLOF as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::crb:SLOF" }, "product_reference": "SLOF", "relates_to_product_reference": "rhel-8.6.0.z.eus::crb" }, { "category": "default_component_of", "full_product_name": { "name": "SLOF as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::crb:SLOF" }, "product_reference": "SLOF", "relates_to_product_reference": "rhel-8.8.0::crb" }, { "category": "default_component_of", "full_product_name": { "name": "SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-br-8.6.0.z.eus::crb:SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src" }, "product_reference": "SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src", "relates_to_product_reference": "rhel-br-8.6.0.z.eus::crb" }, { "category": "default_component_of", "full_product_name": { "name": "SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::crb:SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src" }, "product_reference": "SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src", "relates_to_product_reference": "rhel-8.6.0.z.eus::crb" }, { "category": "default_component_of", "full_product_name": { "name": "SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0::crb:SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src" }, "product_reference": "SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src", "relates_to_product_reference": "rhel-8.8.0::crb" }, { "category": "default_component_of", "full_product_name": { "name": "SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-br-8.8.0::crb:SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src" }, "product_reference": "SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src", "relates_to_product_reference": "rhel-br-8.8.0::crb" }, { "category": "default_component_of", "full_product_name": { "name": "virt:8.2/libtpms.src as a component of RHEL Advanced Virtualization rhel-8.4.0.z", "product_id": "rhel-av-8.virtualization:virt:8.2/libtpms.src" }, "product_reference": "virt:8.2/libtpms.src", "relates_to_product_reference": "rhel-av-8.virtualization" }, { "category": "default_component_of", "full_product_name": { "name": "virt:8.3/libtpms.src as a component of RHEL Advanced Virtualization rhel-8.4.0.z", "product_id": "rhel-av-8.virtualization:virt:8.3/libtpms.src" }, "product_reference": "virt:8.3/libtpms.src", "relates_to_product_reference": "rhel-av-8.virtualization" }, { "category": "default_component_of", "full_product_name": { "name": "virt:av/libtpms.src as a component of RHEL Advanced Virtualization rhel-8.4.0.z", "product_id": "rhel-av-8.virtualization:virt:av/libtpms.src" }, "product_reference": "virt:av/libtpms.src", "relates_to_product_reference": "rhel-av-8.virtualization" }, { "category": "default_component_of", "full_product_name": { "name": "virt:rhel:8080020230410211546:fd72936b/virt as a component of Red Hat Enterprise Linux 8.8", "product_id": "rhel-8.8.0:virt:rhel:8080020230410211546:fd72936b/virt" }, "product_reference": "virt:rhel:8080020230410211546:fd72936b/virt", "relates_to_product_reference": "rhel-8.8.0" }, { "category": "default_component_of", "full_product_name": { "name": "virt:rhel:8080020230410211546:fd72936b/virt as a component of Red Hat Enterprise Linux 8.7", "product_id": "rhel-8.7.0.z:virt:rhel:8080020230410211546:fd72936b/virt" }, "product_reference": "virt:rhel:8080020230410211546:fd72936b/virt", "relates_to_product_reference": "rhel-8.7.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "virt:rhel:8080020230410211546:fd72936b/virt as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:virt:rhel:8080020230410211546:fd72936b/virt" }, "product_reference": "virt:rhel:8080020230410211546:fd72936b/virt", "relates_to_product_reference": "rhel-8.6.0.z.aus" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-1018", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2022-11-29T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhel-8.10.z::appstream:hivex-debuginfo", "rhel-8.10.z::appstream:hivex-debugsource", "rhel-8.10.z::appstream:hivex-devel", "rhel-8.10.z::appstream:ocaml-hivex-debuginfo", "rhel-8.10.z::appstream:ocaml-hivex-devel", "rhel-8.10.z::appstream:perl-hivex-debuginfo", "rhel-8.10.z::appstream:python3-hivex-debuginfo", "rhel-8.10.z::appstream:ruby-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:hivex-debugsource", "rhel-8.6.0.z.eus::appstream:hivex-devel", "rhel-8.6.0.z.eus::appstream:ocaml-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:ocaml-hivex-devel", "rhel-8.6.0.z.eus::appstream:perl-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:python3-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:ruby-hivex-debuginfo", "rhel-8.8.0::appstream:hivex-devel", "rhel-8.8.0::appstream:ocaml-hivex-devel", "rhel-9.2.0::appstream:libtpms-debuginfo", "rhel-9.2.0::appstream:libtpms-debugsource", "rhel-av-8.virtualization:libtpms-devel", "rhel-br-8.6.0.z.eus::appstream:hivex-devel", "rhel-br-8.6.0.z.eus::appstream:ocaml-hivex-devel", "rhel-br-8.8.0::appstream:hivex-devel", "rhel-br-8.8.0::appstream:ocaml-hivex-devel", "rhel-br-9.2.0::appstream:libtpms-debuginfo", "rhel-br-9.2.0::appstream:libtpms-debugsource" ] } ], "notes": [ { "category": "description", "text": "An out-of-bound read vulnerability was found in the TPM 2.0's Module Library, which allows the reading of 2-byte data after the end of the TPM command. This flaw allows an attacker to leak confidential data stored within the libtpms context.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "rhel-8.10.z::appstream:hivex", "rhel-8.10.z::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-8.10.z::appstream:ocaml-hivex", "rhel-8.10.z::appstream:perl-hivex", "rhel-8.10.z::appstream:python3-hivex", "rhel-8.10.z::appstream:ruby-hivex", "rhel-8.6.0.z.eus::appstream:hivex", "rhel-8.6.0.z.eus::appstream:hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src", "rhel-8.6.0.z.eus::appstream:ocaml-hivex", "rhel-8.6.0.z.eus::appstream:perl-hivex", "rhel-8.6.0.z.eus::appstream:python3-hivex", "rhel-8.6.0.z.eus::appstream:ruby-hivex", "rhel-8.6.0.z.eus::crb:SLOF", "rhel-8.6.0.z.eus::crb:SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src", "rhel-8.8.0::appstream:hivex", "rhel-8.8.0::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-8.8.0::appstream:ocaml-hivex", "rhel-8.8.0::appstream:perl-hivex", "rhel-8.8.0::appstream:python3-hivex", "rhel-8.8.0::appstream:ruby-hivex", "rhel-8.8.0::crb:SLOF", "rhel-8.8.0::crb:SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src", "rhel-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2", "rhel-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src", "rhel-br-8.6.0.z.eus::appstream:hivex", "rhel-br-8.6.0.z.eus::appstream:hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src", "rhel-br-8.6.0.z.eus::appstream:ocaml-hivex", "rhel-br-8.6.0.z.eus::appstream:perl-hivex", "rhel-br-8.6.0.z.eus::appstream:python3-hivex", "rhel-br-8.6.0.z.eus::appstream:ruby-hivex", "rhel-br-8.6.0.z.eus::crb:SLOF", "rhel-br-8.6.0.z.eus::crb:SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src", "rhel-br-8.8.0::appstream:hivex", "rhel-br-8.8.0::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-br-8.8.0::appstream:ocaml-hivex", "rhel-br-8.8.0::appstream:perl-hivex", "rhel-br-8.8.0::appstream:python3-hivex", "rhel-br-8.8.0::appstream:ruby-hivex", "rhel-br-8.8.0::crb:SLOF", "rhel-br-8.8.0::crb:SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src", "rhel-br-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2", "rhel-br-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src" ], "known_affected": [ "rhel-8.6.0.z.aus:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-8.7.0.z:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-8.8.0:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-9.1.0.z:libtpms", "rhel-9.1.0.z:libtpms.src", "rhel-av-8.virtualization:libtpms", "rhel-av-8.virtualization:virt:8.2/libtpms.src", "rhel-av-8.virtualization:virt:8.3/libtpms.src", "rhel-av-8.virtualization:virt:av/libtpms.src" ], "known_not_affected": [ "rhel-8.10.z::appstream:hivex-debuginfo", "rhel-8.10.z::appstream:hivex-debugsource", "rhel-8.10.z::appstream:hivex-devel", "rhel-8.10.z::appstream:ocaml-hivex-debuginfo", "rhel-8.10.z::appstream:ocaml-hivex-devel", "rhel-8.10.z::appstream:perl-hivex-debuginfo", "rhel-8.10.z::appstream:python3-hivex-debuginfo", "rhel-8.10.z::appstream:ruby-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:hivex-debugsource", "rhel-8.6.0.z.eus::appstream:hivex-devel", "rhel-8.6.0.z.eus::appstream:ocaml-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:ocaml-hivex-devel", "rhel-8.6.0.z.eus::appstream:perl-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:python3-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:ruby-hivex-debuginfo", "rhel-8.8.0::appstream:hivex-devel", "rhel-8.8.0::appstream:ocaml-hivex-devel", "rhel-9.2.0::appstream:libtpms-debuginfo", "rhel-9.2.0::appstream:libtpms-debugsource", "rhel-av-8.virtualization:libtpms-devel", "rhel-br-8.6.0.z.eus::appstream:hivex-devel", "rhel-br-8.6.0.z.eus::appstream:ocaml-hivex-devel", "rhel-br-8.8.0::appstream:hivex-devel", "rhel-br-8.8.0::appstream:ocaml-hivex-devel", "rhel-br-9.2.0::appstream:libtpms-debuginfo", "rhel-br-9.2.0::appstream:libtpms-debugsource" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-1018" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1018" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2023-1018" } ], "remediations": [ { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "rhel-8.7.0.z:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-9.1.0.z:libtpms", "rhel-9.1.0.z:libtpms.src", "rhel-av-8.virtualization:libtpms", "rhel-av-8.virtualization:virt:8.2/libtpms.src", "rhel-av-8.virtualization:virt:8.3/libtpms.src" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "rhel-8.6.0.z.aus:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-8.8.0:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-av-8.virtualization:libtpms", "rhel-av-8.virtualization:virt:av/libtpms.src" ] }, { "category": "vendor_fix", "date": "2023-05-16T09:07:41+00:00", "details": "Apply advisory RHSA-2023:2757 as per vendors instructions.", "product_ids": [ "rhel-8.10.z::appstream:hivex", "rhel-8.10.z::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-8.10.z::appstream:ocaml-hivex", "rhel-8.10.z::appstream:perl-hivex", "rhel-8.10.z::appstream:python3-hivex", "rhel-8.10.z::appstream:ruby-hivex", "rhel-8.8.0::appstream:hivex", "rhel-8.8.0::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-8.8.0::appstream:ocaml-hivex", "rhel-8.8.0::appstream:perl-hivex", "rhel-8.8.0::appstream:python3-hivex", "rhel-8.8.0::appstream:ruby-hivex", "rhel-8.8.0::crb:SLOF", "rhel-8.8.0::crb:SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src", "rhel-br-8.8.0::appstream:hivex", "rhel-br-8.8.0::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-br-8.8.0::appstream:ocaml-hivex", "rhel-br-8.8.0::appstream:perl-hivex", "rhel-br-8.8.0::appstream:python3-hivex", "rhel-br-8.8.0::appstream:ruby-hivex", "rhel-br-8.8.0::crb:SLOF", "rhel-br-8.8.0::crb:SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src" ], "url": "https://access.redhat.com/errata/RHSA-2023:2757" }, { "category": "vendor_fix", "date": "2023-04-18T16:42:29+00:00", "details": "Apply advisory RHSA-2023:1833 as per vendors instructions.", "product_ids": [ "rhel-8.6.0.z.eus::appstream:hivex", "rhel-8.6.0.z.eus::appstream:hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src", "rhel-8.6.0.z.eus::appstream:ocaml-hivex", "rhel-8.6.0.z.eus::appstream:perl-hivex", "rhel-8.6.0.z.eus::appstream:python3-hivex", "rhel-8.6.0.z.eus::appstream:ruby-hivex", "rhel-8.6.0.z.eus::crb:SLOF", "rhel-8.6.0.z.eus::crb:SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src", "rhel-br-8.6.0.z.eus::appstream:hivex", "rhel-br-8.6.0.z.eus::appstream:hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src", "rhel-br-8.6.0.z.eus::appstream:ocaml-hivex", "rhel-br-8.6.0.z.eus::appstream:perl-hivex", "rhel-br-8.6.0.z.eus::appstream:python3-hivex", "rhel-br-8.6.0.z.eus::appstream:ruby-hivex", "rhel-br-8.6.0.z.eus::crb:SLOF", "rhel-br-8.6.0.z.eus::crb:SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src" ], "url": "https://access.redhat.com/errata/RHSA-2023:1833" }, { "category": "vendor_fix", "date": "2023-05-09T10:03:07+00:00", "details": "Apply advisory RHSA-2023:2453 as per vendors instructions.", "product_ids": [ "rhel-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2", "rhel-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src", "rhel-br-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2", "rhel-br-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src" ], "url": "https://access.redhat.com/errata/RHSA-2023:2453" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM" }, "products": [ "rhel-8.10.z::appstream:hivex", "rhel-8.10.z::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-8.10.z::appstream:hivex-debuginfo", "rhel-8.10.z::appstream:hivex-debugsource", "rhel-8.10.z::appstream:hivex-devel", "rhel-8.10.z::appstream:ocaml-hivex", "rhel-8.10.z::appstream:ocaml-hivex-debuginfo", "rhel-8.10.z::appstream:ocaml-hivex-devel", "rhel-8.10.z::appstream:perl-hivex", "rhel-8.10.z::appstream:perl-hivex-debuginfo", "rhel-8.10.z::appstream:python3-hivex", "rhel-8.10.z::appstream:python3-hivex-debuginfo", "rhel-8.10.z::appstream:ruby-hivex", "rhel-8.10.z::appstream:ruby-hivex-debuginfo", "rhel-8.6.0.z.aus:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-8.6.0.z.eus::appstream:hivex", "rhel-8.6.0.z.eus::appstream:hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src", "rhel-8.6.0.z.eus::appstream:hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:hivex-debugsource", "rhel-8.6.0.z.eus::appstream:hivex-devel", "rhel-8.6.0.z.eus::appstream:ocaml-hivex", "rhel-8.6.0.z.eus::appstream:ocaml-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:ocaml-hivex-devel", "rhel-8.6.0.z.eus::appstream:perl-hivex", "rhel-8.6.0.z.eus::appstream:perl-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:python3-hivex", "rhel-8.6.0.z.eus::appstream:python3-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:ruby-hivex", "rhel-8.6.0.z.eus::appstream:ruby-hivex-debuginfo", "rhel-8.6.0.z.eus::crb:SLOF", "rhel-8.6.0.z.eus::crb:SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src", "rhel-8.7.0.z:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-8.8.0::appstream:hivex", "rhel-8.8.0::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-8.8.0::appstream:hivex-devel", "rhel-8.8.0::appstream:ocaml-hivex", "rhel-8.8.0::appstream:ocaml-hivex-devel", "rhel-8.8.0::appstream:perl-hivex", "rhel-8.8.0::appstream:python3-hivex", "rhel-8.8.0::appstream:ruby-hivex", "rhel-8.8.0::crb:SLOF", "rhel-8.8.0::crb:SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src", "rhel-8.8.0:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-9.1.0.z:libtpms", "rhel-9.1.0.z:libtpms.src", "rhel-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2", "rhel-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src", "rhel-9.2.0::appstream:libtpms-debuginfo", "rhel-9.2.0::appstream:libtpms-debugsource", "rhel-av-8.virtualization:libtpms", "rhel-av-8.virtualization:libtpms-devel", "rhel-av-8.virtualization:virt:8.2/libtpms.src", "rhel-av-8.virtualization:virt:8.3/libtpms.src", "rhel-av-8.virtualization:virt:av/libtpms.src", "rhel-br-8.6.0.z.eus::appstream:hivex", "rhel-br-8.6.0.z.eus::appstream:hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src", "rhel-br-8.6.0.z.eus::appstream:hivex-devel", "rhel-br-8.6.0.z.eus::appstream:ocaml-hivex", "rhel-br-8.6.0.z.eus::appstream:ocaml-hivex-devel", "rhel-br-8.6.0.z.eus::appstream:perl-hivex", "rhel-br-8.6.0.z.eus::appstream:python3-hivex", "rhel-br-8.6.0.z.eus::appstream:ruby-hivex", "rhel-br-8.6.0.z.eus::crb:SLOF", "rhel-br-8.6.0.z.eus::crb:SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src", "rhel-br-8.8.0::appstream:hivex", "rhel-br-8.8.0::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-br-8.8.0::appstream:hivex-devel", "rhel-br-8.8.0::appstream:ocaml-hivex", "rhel-br-8.8.0::appstream:ocaml-hivex-devel", "rhel-br-8.8.0::appstream:perl-hivex", "rhel-br-8.8.0::appstream:python3-hivex", "rhel-br-8.8.0::appstream:ruby-hivex", "rhel-br-8.8.0::crb:SLOF", "rhel-br-8.8.0::crb:SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src", "rhel-br-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2", "rhel-br-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src", "rhel-br-9.2.0::appstream:libtpms-debuginfo", "rhel-br-9.2.0::appstream:libtpms-debugsource" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "rhel-8.10.z::appstream:hivex", "rhel-8.10.z::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-8.10.z::appstream:hivex-debuginfo", "rhel-8.10.z::appstream:hivex-debugsource", "rhel-8.10.z::appstream:hivex-devel", "rhel-8.10.z::appstream:ocaml-hivex", "rhel-8.10.z::appstream:ocaml-hivex-debuginfo", "rhel-8.10.z::appstream:ocaml-hivex-devel", "rhel-8.10.z::appstream:perl-hivex", "rhel-8.10.z::appstream:perl-hivex-debuginfo", "rhel-8.10.z::appstream:python3-hivex", "rhel-8.10.z::appstream:python3-hivex-debuginfo", "rhel-8.10.z::appstream:ruby-hivex", "rhel-8.10.z::appstream:ruby-hivex-debuginfo", "rhel-8.6.0.z.aus:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-8.6.0.z.eus::appstream:hivex", "rhel-8.6.0.z.eus::appstream:hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src", "rhel-8.6.0.z.eus::appstream:hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:hivex-debugsource", "rhel-8.6.0.z.eus::appstream:hivex-devel", "rhel-8.6.0.z.eus::appstream:ocaml-hivex", "rhel-8.6.0.z.eus::appstream:ocaml-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:ocaml-hivex-devel", "rhel-8.6.0.z.eus::appstream:perl-hivex", "rhel-8.6.0.z.eus::appstream:perl-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:python3-hivex", "rhel-8.6.0.z.eus::appstream:python3-hivex-debuginfo", "rhel-8.6.0.z.eus::appstream:ruby-hivex", "rhel-8.6.0.z.eus::appstream:ruby-hivex-debuginfo", "rhel-8.6.0.z.eus::crb:SLOF", "rhel-8.6.0.z.eus::crb:SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src", "rhel-8.7.0.z:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-8.8.0::appstream:hivex", "rhel-8.8.0::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-8.8.0::appstream:hivex-devel", "rhel-8.8.0::appstream:ocaml-hivex", "rhel-8.8.0::appstream:ocaml-hivex-devel", "rhel-8.8.0::appstream:perl-hivex", "rhel-8.8.0::appstream:python3-hivex", "rhel-8.8.0::appstream:ruby-hivex", "rhel-8.8.0::crb:SLOF", "rhel-8.8.0::crb:SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src", "rhel-8.8.0:virt:rhel:8080020230410211546:fd72936b/virt", "rhel-9.1.0.z:libtpms", "rhel-9.1.0.z:libtpms.src", "rhel-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2", "rhel-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src", "rhel-9.2.0::appstream:libtpms-debuginfo", "rhel-9.2.0::appstream:libtpms-debugsource", "rhel-av-8.virtualization:libtpms", "rhel-av-8.virtualization:libtpms-devel", "rhel-av-8.virtualization:virt:8.2/libtpms.src", "rhel-av-8.virtualization:virt:8.3/libtpms.src", "rhel-av-8.virtualization:virt:av/libtpms.src", "rhel-br-8.6.0.z.eus::appstream:hivex", "rhel-br-8.6.0.z.eus::appstream:hivex-0:1.3.18-23.module+el8.6.0+14480+c0a3aa0f.src", "rhel-br-8.6.0.z.eus::appstream:hivex-devel", "rhel-br-8.6.0.z.eus::appstream:ocaml-hivex", "rhel-br-8.6.0.z.eus::appstream:ocaml-hivex-devel", "rhel-br-8.6.0.z.eus::appstream:perl-hivex", "rhel-br-8.6.0.z.eus::appstream:python3-hivex", "rhel-br-8.6.0.z.eus::appstream:ruby-hivex", "rhel-br-8.6.0.z.eus::crb:SLOF", "rhel-br-8.6.0.z.eus::crb:SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src", "rhel-br-8.8.0::appstream:hivex", "rhel-br-8.8.0::appstream:hivex-0:1.3.18-23.module+el8.8.0+16781+9f4724c2.src", "rhel-br-8.8.0::appstream:hivex-devel", "rhel-br-8.8.0::appstream:ocaml-hivex", "rhel-br-8.8.0::appstream:ocaml-hivex-devel", "rhel-br-8.8.0::appstream:perl-hivex", "rhel-br-8.8.0::appstream:python3-hivex", "rhel-br-8.8.0::appstream:ruby-hivex", "rhel-br-8.8.0::crb:SLOF", "rhel-br-8.8.0::crb:SLOF-0:20210217-1.module+el8.8.0+16781+9f4724c2.src", "rhel-br-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2", "rhel-br-9.2.0::appstream:libtpms-0:0.9.1-3.20211126git1ff6fe1f43.el9_2.src", "rhel-br-9.2.0::appstream:libtpms-debuginfo", "rhel-br-9.2.0::appstream:libtpms-debugsource" ] } ], "title": "TCG TPM2.0 implementations vulnerable to memory corruption" } ] }