TCG TPM2.0 implementations vulnerable to memory corruption
Hello everybody,
TLDR:
LetsTrust-TPMs are NOT effected.
Long Story Long:
on 28.02.2023 the CVE-2023-1017 and CVE-2023-1018 came out https://kb.cert.org/vuls/id/782720.
The SLB9670 from Infineon is soldered on LetsTrust-TPMs:
And here is Infineon's statement:
https://kb.cert.org/vuls/id/782720#Infineon%20Technologies%20AG
Bye for now!
Paul
TLDR:
LetsTrust-TPMs are NOT effected.
Long Story Long:
on 28.02.2023 the CVE-2023-1017 and CVE-2023-1018 came out https://kb.cert.org/vuls/id/782720.
The SLB9670 from Infineon is soldered on LetsTrust-TPMs:
And here is Infineon's statement:
https://kb.cert.org/vuls/id/782720#Infineon%20Technologies%20AG
Bye for now!
Paul