CVE:CVE-2021-3623
CNNVD:CNNVD-202107-036
Archlinux libtpms是 Archlinux开源的一个应用程序。提供可信任平台模块（TPM 1.2和TPM 2.0）的软件仿真的库。
Archlinux libtpms存在缓冲区错误漏洞，该漏洞源于边界条件。本地用户可以使用包含非法值的TPM 2命令包来触发一个超出范围的读错误，并执行拒绝服务(DoS)攻击。
solution:Upgrade libtpms_project libtpms to a higher version than 0.6.5,0.7.8,0.8.4,and avoid the version (,0.6.5),[0.7.0,0.7.8),[0.8.0,0.8.4); Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34