Vulnerability DatabaseWS-2022-0159
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
WS-2022-0159
November 03, 2024
In tss-esapi in Rust When Context::start_auth_session was called with a nonce argument value of Some(...), the nonce pointer passed down through FFI to Esys_StartAuthSession would be a dangling pointer, left over from a defunct instance of TPM2B_NONCE. This issue may affect memory safety. Versions 6.1.2 and 7.1.0 contain a patch for this issue .
Related Resources (4)
https://github.com/advisories/GHSA-w3vw-ccc5-qr8v
https://github.com/parallaxsecond/rust-tss-esapi/commit/a301e33dc66da35b11043681a72bcf246af37e1c#diff-cf4d30196319189b95ec0886dc4ab5ffc2dc4271941f312c0841a93ae329dc59
https://github.com/parallaxsecond/rust-tss-esapi/security/advisories/GHSA-w3vw-ccc5-qr8v
https://github.com/parallaxsecond/rust-tss-esapi
Do you need more information?
Contact Us
CVSS v4
Base Score:
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
PASSIVE
Vulnerable System Confidentiality
NONE
Vulnerable System Integrity
NONE
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH