CVE:CVE-2012-0698
CNNVD:CNNVD-201211-478
Trousers是开源TCG软件栈。tcsd是登录TPM设备驱动程序的唯一入口。
TrouSerS 0.3.10之前版本中的tcsd中存在漏洞。远程攻击者利用该漏洞通过在TCP包传送到端口30003中的type_offset值，导致拒绝服务（守护进程崩溃）。
solution:Upgrade trustedcomputinggroup trousers to a higher version than 0.3.9,0.2.8,0.2.9,0.2.9.1,0.2.9.2,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.3.7,0.3.8,and avoid the version (,0.3.9],0.2.8,0.2.9,0.2.9.1,0.2.9.2,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.3.7,0.3.8