Bugzilla – Bug 1186490
VUL-0: CVE-2021-3565: tpm2.0-tools: during tpm2_import command invocation a fixed AES wrapping key is used
Last modified: 2024-05-23 15:35:47 UTC
During tpm2_import command invocation a fixed AES wrapping key is used. This presents a weakness in that, when no encrypted session with the TPM is used, the encrypted inner wrapper key is known and thus an entity performing an MITM on the TPM would be able to unwrap the inner portion and reveal the key being imported. References: https://bugzilla.redhat.com/show_bug.cgi?id=1964427
Upstream issue and fixing commit are found here: https://github.com/tpm2-software/tpm2-tools/issues/2738
This is an autogenerated message for OBS integration: This bug (1186490) was mentioned in https://build.opensuse.org/request/show/895955 Factory / tpm2.0-tools
I submitted fixes for Factory and SLE-15 codestreams. SLE-12 codestreams are not affected. It's a bit complicated for SLE-12-SP5, because the tpm2_import tool was added at a time to the 3.X release series, but was removed later on again, because it was not compatible with older tss libraries. Long story short: not contained in our SLE-12 codestreams.
Reassigning to security team for tracking.
SUSE-SU-2021:1999-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1186490 CVE References: CVE-2021-3565 JIRA References: Sources used: SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): tpm2.0-tools-4.1-3.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:1998-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1186490 CVE References: CVE-2021-3565 JIRA References: Sources used: SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): tpm2.0-tools-4.3.0-4.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2021:0934-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1186490 CVE References: CVE-2021-3565 JIRA References: Sources used: openSUSE Leap 15.2 (src): tpm2.0-tools-4.1-lp152.2.3.1
openSUSE-SU-2021:1998-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1186490 CVE References: CVE-2021-3565 JIRA References: Sources used: openSUSE Leap 15.3 (src): tpm2.0-tools-4.3.0-4.3.1
All done, closing.