CVE-2017-7524 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-7524 Interim 1 23 2023-06-27T00:11:46Z current 2021-05-30T13:54:48Z 2023-06-27T00:11:46Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-7524 tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 openSUSE Tumbleweed tpm2.0-tools tpm2.0-tools-2.0.0-2.1 tpm2.0-tools-3.0.4-1.8 tpm2.0-tools-3.1.1-1.16 tpm2.0-tools-3.1.2-5.30 tpm2.0-tools-3.1.4-1.12 tpm2.0-tools-4.1-1.57 tpm2.0-tools-4.3.0-2.3 tpm2.0-tools-5.1.1-3.2 tpm2.0-tools-5.2-150400.4.6 tpm2.0-tools-3.1.4-1.12 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 tpm2.0-tools-5.2-150400.4.6 as a component of SUSE Linux Enterprise Micro 5.3 tpm2.0-tools-5.2-150400.4.6 as a component of SUSE Linux Enterprise Micro 5.4 tpm2.0-tools-3.0.4-1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 tpm2.0-tools-3.1.2-5.30 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 tpm2.0-tools-4.1-1.57 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 tpm2.0-tools-4.3.0-2.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 tpm2.0-tools-5.2-150400.4.6 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 tpm2.0-tools-5.2-150400.4.6 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 tpm2.0-tools-2.0.0-2.1 as a component of SUSE Linux Enterprise Server 12 SP3 tpm2.0-tools-3.1.1-1.16 as a component of SUSE Linux Enterprise Server 12 SP4 tpm2.0-tools-3.1.4-1.12 as a component of SUSE Linux Enterprise Server 12 SP5 tpm2.0-tools-5.1.1-3.2 as a component of openSUSE Tumbleweed tpm2.0-tools as a component of HPE Helion OpenStack 8 tpm2.0-tools as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS tpm2.0-tools as a component of SUSE Linux Enterprise Server 12 SP3-BCL tpm2.0-tools as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS tpm2.0-tools as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tpm2.0-tools as a component of SUSE Linux Enterprise Server 15-ESPOS tpm2.0-tools as a component of SUSE Linux Enterprise Server 15-LTSS tpm2.0-tools as a component of SUSE Linux Enterprise Server Teradata 12 SP3 tpm2.0-tools as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 tpm2.0-tools as a component of SUSE Linux Enterprise Server for SAP Applications 15 tpm2.0-tools as a component of SUSE OpenStack Cloud 8 tpm2.0-tools as a component of SUSE OpenStack Cloud Crowbar 8 tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC. CVE-2017-7524 SUSE Linux Enterprise High Performance Computing 12 SP5:tpm2.0-tools-3.1.4-1.12 SUSE Linux Enterprise Micro 5.3:tpm2.0-tools-5.2-150400.4.6 SUSE Linux Enterprise Micro 5.4:tpm2.0-tools-5.2-150400.4.6 SUSE Linux Enterprise Module for Basesystem 15:tpm2.0-tools-3.0.4-1.8 SUSE Linux Enterprise Module for Basesystem 15 SP1:tpm2.0-tools-3.1.2-5.30 SUSE Linux Enterprise Module for Basesystem 15 SP2:tpm2.0-tools-4.1-1.57 SUSE Linux Enterprise Module for Basesystem 15 SP3:tpm2.0-tools-4.3.0-2.3 SUSE Linux Enterprise Module for Basesystem 15 SP4:tpm2.0-tools-5.2-150400.4.6 SUSE Linux Enterprise Module for Basesystem 15 SP5:tpm2.0-tools-5.2-150400.4.6 SUSE Linux Enterprise Server 12 SP3:tpm2.0-tools-2.0.0-2.1 SUSE Linux Enterprise Server 12 SP4:tpm2.0-tools-3.1.1-1.16 SUSE Linux Enterprise Server 12 SP5:tpm2.0-tools-3.1.4-1.12 openSUSE Tumbleweed:tpm2.0-tools-5.1.1-3.2 HPE Helion OpenStack 8:tpm2.0-tools SUSE Linux Enterprise High Performance Computing 15-LTSS:tpm2.0-tools SUSE Linux Enterprise Server 12 SP3-BCL:tpm2.0-tools SUSE Linux Enterprise Server 12 SP3-ESPOS:tpm2.0-tools SUSE Linux Enterprise Server 12 SP3-LTSS:tpm2.0-tools SUSE Linux Enterprise Server 15-ESPOS:tpm2.0-tools SUSE Linux Enterprise Server 15-LTSS:tpm2.0-tools SUSE Linux Enterprise Server Teradata 12 SP3:tpm2.0-tools SUSE Linux Enterprise Server for SAP Applications 12 SP3:tpm2.0-tools SUSE Linux Enterprise Server for SAP Applications 15:tpm2.0-tools SUSE OpenStack Cloud 8:tpm2.0-tools SUSE OpenStack Cloud Crowbar 8:tpm2.0-tools important 5 AV:N/AC:L/Au:N/C:P/I:N/A:N 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N