CVE-2023-1017 Report - Details, Severity, & Advisories

CVE-2023-1017 is a high-severity vulnerability affecting the Trusted Platform Module (TPM) 2.0's Module Library, specifically in the CryptParameterDecryption routine. This out-of-bounds write vulnerability can lead to denial of service or arbitrary code execution in the TPM context, impacting certain versions of Trusted Computing Group's TPM and various versions of Microsoft's Windows 10, Windows 11, and Windows Server.

How do I know if I'm affected?

To determine if you're affected by the CVE-2023-1017 vulnerability, check if your system uses Trusted Computing Group's Trusted Platform Module 2.0 with revisions 1.16, 1.38, or 1.59. Additionally, Microsoft Windows 10, Windows 11, and Windows Server users should verify their version numbers, as specific versions of these operating systems are also impacted. Unfortunately, no information about affected Apple product versions is available. Keep in mind that this vulnerability can lead to denial of service or arbitrary code execution in the TPM context, so it's essential to stay informed and take necessary precautions.

What should I do if I'm affected?

If you're affected by the this vulnerability, follow these steps: Check for updates from your hardware and software manufacturers. Apply any available updates, which may include updating your TPM firmware. In high-assurance environments, consider using TPM Remote Attestation to detect changes and ensure tamper-proofing. Stay vigilant and keep your systems updated to minimize risks.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-1017 vulnerability is indeed listed in CISA's Known Exploited Vulnerabilities Catalog. This high-severity issue, an out-of-bounds write vulnerability in TPM2.0's Module Library, was added to the catalog on February 28, 2023. Unfortunately, the due date and required action are not provided. To protect your system, it's crucial to stay informed, apply updates from hardware and software manufacturers, and follow any available mitigation guidance.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-787 is an out-of-bounds write issue, which could allow an attacker to access sensitive data or overwrite protected data in the TPM firmware. Mitigation includes updating the TPM2.0 Library Specification.

For more details

CVE-2023-1017 is a high-severity vulnerability with potential consequences such as denial of service or arbitrary code execution in the TPM context. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD page or the links below.

• CERT Coordination Center

• Trusted Computing Group Security

• TCG Advisory (PDF)