CVE-2021-3565 Weak cryptography in tpm2-tools
A fixed AES key in tpm2-tools allows MITM attackers to unwrap inner data and reveal imported keys, compromising confidentiality.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-3565?
CVE-2021-3565 is a medium-severity vulnerability in Fedoraproject Fedora, published on 4 Jun 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.
Which versions are affected by CVE-2021-3565?
It affects 3 products.
Linux distribution packages (9)
tpm2-tools AlmaLinux:8 | All versions | 4.1.1-5.el8 |
tpm2-tools Red Hat:enterprise_linux:8::baseos | All versions | 0:4.1.1-5.el8 |
tpm2-tools-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:4.1.1-5.el8 |
tpm2-tools-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:4.1.1-5.el8 |
tpm2-tools Rocky Linux:8 | All versions | 0:4.1.1-5.el8 |
tpm2.0-tools SUSE:Linux Enterprise Module for Basesystem 15 SP2 | All versions | 4.1-3.3.1 |
tpm2.0-tools SUSE:Linux Enterprise Module for Basesystem 15 SP3 | All versions | 4.3.0-4.3.1 |
tpm2.0-tools openSUSE:Leap 15.2 | All versions | 4.1-lp152.2.3.1 |
tpm2.0-tools openSUSE:Leap 15.3 | All versions | 4.3.0-4.3.1 |
Products include Fedoraproject Fedora, Redhat Enterprise Linux, Tpm2-Tools Project Tpm2-Tools.
How do I fix CVE-2021-3565?
Upgrade to a fixed version.
Is CVE-2021-3565 being exploited?
There is no known exploitation of CVE-2021-3565 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as ALSA-2021:4413, AZL-6923, DEBIAN-CVE-2021-3565, GHSA-jxhq-r9c5-f85p, MGASA-2021-0353, OESA-2021-1384 and 7 more.