Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

tpm2.0

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.

CVE-2023-1017 is a security vulnerability classified as CWE-787 (Out-of-bounds Write) found in the Trusted Computing Group's TPM2.0 Module Library, specifically in version 1.59. The vulnerability arises in the CryptParameterDecryption routine, where the code erroneously writes 2 bytes beyond the allocated buffer boundary for TPM2.0 commands. This out-of-bounds write can corrupt adjacent memory, leading to unpredictable behavior including denial of service by crashing the TPM chip or its managing process. More critically, it may allow an attacker to execute arbitrary code within the TPM context, potentially compromising the TPM's security guarantees. The TPM (Trusted Platform Module) is a hardware-based security component embedded in many modern computing devices, providing cryptographic functions such as secure key storage, platform integrity measurements, and attestation. Because the TPM is foundational to system security, vulnerabilities in its firmware or software stack can have severe consequences. Exploitation requires the attacker to send crafted TPM commands that trigger the out-of-bounds write. There is no indication that user interaction is needed, but the attacker must have the capability to communicate with the TPM interface, which may be restricted in many environments. No public exploits or active exploitation have been reported to date. No CVSS score has been assigned yet. The Trusted Computing Group has not published patches at the time of this report, so mitigation relies on limiting access to TPM interfaces and monitoring for suspicious activity. This vulnerability affects TPM2.0 version 1.59, which is widely deployed in enterprise and government systems across Europe, especially in sectors relying on hardware-based security for compliance and data protection.

Detailed information about CVE-2023-1017: CWE-787 Out-of-bounds Write in Trusted Computing Group TPM2.0 affecting Trusted Computing Group TPM2.0. Get real-time 

CVE-2023-1017: CWE-787 Out-of-bounds Write in Trusted Computing Group TPM2.0 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-1017: CWE-787 Out-of-bounds Write in Trusted Computing Group TPM2.0

Threats Tagged 'cve-2023-1017'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-1017'

Lead Pen Test Professional