{"uuid": "ff1c834d-4853-4811-be7d-f8d821a0d1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1017", "type": "seen", "source": "https://t.me/hacking_Attack/93298", "content": "Black Hat Ethical Hacking\nBillion Devices at Risk: Two Buffer Overflow Flaws Found in TPM 2.0 Specification\n\nBillion Devices at Risk: Two Buffer Overflow Flaws Found in TPM 2.0 SpecificationPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes TPM 2.0 and Its Importance in SecurityThe Trusted Platform Module (TPM) 2.0 specification, a hardware-based technology that provides operating systems with tamper-resistant secure cryptographic functions, is facing security concerns due to two buffer overflow vulnerabilities discovered by Quarkslab researchers Francisco Falcon and Ivan Arce.\n\nThe vulnerabilities, tracked as CVE-2023-1017 (out-of-bounds read) and CVE-2023-1018 (out-of-bounds write), could potentially impact billions of devices and result in information disclosure or escalation of privileges. While TPM is required for some Windows security features, such as Measured Boot, Device Encryption, Windows Defender System Guard (DRTM), and Device Health Attestation, it is not required for other more commonly used features. Nonetheless, when a Trusted Platform Module is available, Windows security features get enhanced security in protecting sensitive information and encrypting data.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Discovering the Vulnerabilities in TPM 2.0The vulnerabilities arise from how the specification processes the parameters for some TPM commands, allowing an authenticated local attacker to exploit them by sending maliciously crafted commands to execute code within the TPM. According to the security bulletin by Trusted Computing Group (TCG), the developer of the TPM specification, this could result in information disclosure or escalation of privileges. The CERT Coordination Center has published an alert about the vulnerabilities and has been informing vendors for months, trying to raise awareness while mapping the impact. Unfortunately, only a handful of entities have confirmed they are impacted.\n\nThe impact of these vulnerabilities depends on what vendors have implemented on that memory location, i.e., if it\u2019s unused memory or if it contains live data. Lenovo is the only major OEM that has issued a security advisory about the two TPM flaws so far, warning that CVE-2023-1017 impacts some of its systems running on Nuvoton TPM 2.0 chips. While these flaws require authenticated local access to a device, it is important to remember that malware running on the device would meet that condition. TPM is a highly-secured space that should theoretically be shielded even from malware running on the device, so the practical importance of these vulnerabilities shouldn\u2019t be ignored or downplayed.\nTrending: Primer on Broken Access Control vulnerabilities and how to find them Trending: Offensive Security Tool: SecretOpt1c Impact and Recommendations for Users and VendorsUsers are recommended to limit physical access to their devices to trusted users, only use signed applications from reputable vendors, and apply firmware updates as soon as they become available for their devices. It is crucial for impacted vendors to move to a fixed version of the specification, which includes TMP 2.0 v1.59 Errata version 1.4 or higher, TMP 2.0 v1.38 Errata version 1.13 or higher, or TMP 2.0 v1.16 Errata version 1.6 or higher. The TPM vulnerabilities serve as a reminder of the importance of regularly updating firmware and safeguarding against potential risks to sensitive data.\nTrending: Critical vulnerabilities discovered in popular Houzez theme and plugin for WordPress Are u a security researcher? Or a company that writes articles [...]", "creation_timestamp": "2026-09-02T01:01:23.927096Z"}