https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:32:52.021262+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4413 ALSA-2021:4413 — Moderate: tpm2-tools security and enhancement update 2026-10-03T03:32:52.035387+00:00

Affected: AlmaLinux:8: tpm2-tools

The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module (TPM) 2.0 devices from user space.

Security Fix(es):

* tpm2-tools: fixed AES wrapping key in tpm2_import (CVE-2021-3565)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-04868 bdu:2021-04868 2026-10-03T03:32:52.035441+00:00 bdu:2021-04868 https://cve.radiocsirt.org/vuln/euvd-2026-20927 EUVD-2026-20927 2026-10-03T03:32:52.035458+00:00 EUVD-2026-20927 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3565 fkie_cve-2021-3565 2026-10-03T03:32:52.035470+00:00

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.

 https://cve.radiocsirt.org/vuln/ghsa-jxhq-r9c5-f85p GHSA-jxhq-r9c5-f85p 2026-10-03T03:32:52.035491+00:00

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.

 https://cve.radiocsirt.org/vuln/gsd-2021-3565 gsd-2021-3565 2026-10-03T03:32:52.035505+00:00 gsd-2021-3565 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3565 msrc_CVE-2021-3565 — A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inne… 2026-10-03T03:32:52.035515+00:00 msrc_CVE-2021-3565 https://cve.radiocsirt.org/vuln/oesa-2021-1384 OESA-2021-1384 — tpm2-tools security update 2026-10-03T03:32:52.035531+00:00

Affected: openEuler:20.03-LTS-SP1: tpm2-tools, openEuler:20.03-LTS-SP2: tpm2-tools

The package contains the code for the TPM (Trusted Platform Module) 2.0 tools based on tpm2-tss.

The tpm2-tools projects aims to deliver both low-level and aggregate command line tools that provide access to a tpm2.0 compatible device. Security Fix(es): A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.(CVE-2021-3565)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0934-1 openSUSE-SU-2021:0934-1 — Security update for tpm2.0-tools 2026-10-03T03:32:52.035555+00:00

Security update for tpm2.0-tools

 https://cve.radiocsirt.org/vuln/suse-su-2021:1998-1 SUSE-SU-2021:1998-1 — Security update for tpm2.0-tools 2026-10-03T03:32:52.035571+00:00

Security update for tpm2.0-tools

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3565 UBUNTU-CVE-2021-3565 2026-10-03T03:32:52.035584+00:00

Affected: Ubuntu:16.04:LTS: tpm2-tools, Ubuntu:20.04:LTS: tpm2-tools, Ubuntu:22.04:LTS: tpm2-tools, Ubuntu:24.04:LTS: tpm2-tools, Ubuntu:25.10: tpm2-tools, Ubuntu:26.04:LTS: tpm2-tools

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0571 WID-SEC-W-2022-0571 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T03:32:52.035608+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren und einen nicht spezifizierten Angriff durchzuführen.