[Железо] "New Vulnerabilities Found in TPM 2.0 Library ..." от TechPowerUp

TL;DR В TPM 2.0, некогда необходимом модуле для установки Windows 11, найдены уязвимости CVE-2023-1017 и CVE-2023-1018, оцененные от 5.5 и до 7.8 баллов оценки опасности. Одна основана на out of bound writes, другая на reads.

www.techpowerup.com

New Vulnerabilities Found in TPM 2.0 Library That Could be a Potential Threat to Billions of Devices

A pair of new vulnerabilities has been found in the TPM 2.0 library by cybersecurity company Quarkslab, that has security experts worried, as both of the flaws have potential far reaching implications. The two vulnerabilities go under the CVE identifiers of CVE-2023-1017 and CVE-2023-1018, where the...

#железо #tpm #techpowerup #уязвимость

[Железо] "New Vulnerabilities Found in TPM 2.0 Library ..." от TechPowerUp