CVE-2021-3565

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-665CWE-798

Affected software

No affected versions have been published.

Timeline

Published
Jun 4, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-356504.6Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affectCVE-2021-356518.5Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affCVE-2021-3565210.0Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affCVE-2021-356537.7Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affCVE-2021-356547.5Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affCVE-2021-356555.3Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affCVE-2021-356567.5Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported versionCVE-2021-356577.5Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported versionCVE-2021-356587.5Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported versionCVE-2021-356597.5Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported versionCVE-2021-35665.5Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file tCVE-2021-356607.5Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version
CVE-2021-3565: Medium severity, CVSS 5.9 | Vulnix